Fedora 43 : chromium (2026-acf674bc6a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-acf674bc6a advisory. Update to 150.0.7871.181 CVE-2026-16413: Out of bounds write in ANGLE CVE-2026-16414: Insufficient validation of untrusted input in Chromecast...

openSUSE 16: libmariadb-devel / libmariadb3 / libmariadb_plugins / etc (openSUSE-SU-2026:21409-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21409-1 advisory. This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for...

Fedora 45 : scancode-toolkit (2026-2aed12c6c7)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2aed12c6c7 advisory. Automatic update for scancode-toolkit-32.5.0-8.fc45. Changelog Fri Jul 24 2026 Benjamin A. Beasley - 32.5.0-8 - Fix test failure with click 8.4 Wed Jul 22 20...

SUSE SLED15: aom-tools / libSvtAv1Enc1 / libaom-devel / libaom-devel-doc / etc (SUSE-SU-2026:3224-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3224-1 advisory. - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a proces...

Fedora 44 : netatalk (2026-d085110cf3)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d085110cf3 advisory. 4.5.1 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21433-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21433-1 advisory. Changes in hauler: - update embedded dependency x/net to 0.57 to fix CVE-2026-39821 bsc1266602 Tenable has extracted the preceding description block...

SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3219-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3219-1 advisory. - CVE-2026-55628: policy bypass in concatenate operation due to missing checks bsc1270081. - CVE-2026-56362: heap buffer overflow...

GHSA-6VCH-Q96H-7GC3

creationtimestamp| type| source ---|---|--- 2026-07-24 23:31:23+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4 2026-07-25 00:00:18+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4...

Arbitrary Argument Injection

Overview bedrock-agentcore is an An SDK for using Bedrock AgentCore Affected versions of this package are vulnerable to Arbitrary Argument Injection via the installpackages function. An attacker can execute arbitrary commands within the sandboxed environment by supplying specially crafted package...

Improper Validation of Specified Quantity in Input

Overview libp2p is a libp2p: The Python implementation of the libp2p networking stack Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input through the handleincoming process. An attacker can cause the read loop to block indefinitely by sending a...

GHSA-M3QF-58WF-W979

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/dc8fbe1b073218955707634edeb9a32e...

GHSA-3WP3-XXJ9-5JQQ

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...

OmniFaces: Forged combined-resource IDs and related output/push boundaries

Forged combined-resource IDs CombinedResourceInfo accepts a path-derived ID without an authenticity check, inflates it without an output limit, converts it to attacker-selected resource identifiers, and retains unique IDs in an unbounded static cache. In bounded tests, 20,754 encoded bytes...

CVE-2026-55497

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:12+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-g9j2-8w95-3vwv...

CVE-2026-55502

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:09+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-hq88-5x99-x3gf...

Inefficient Algorithmic Complexity

Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the flagProtection process. An attacker can cause significant resource exhaustion by submitting specially crafted large inputs, leading to degraded...

CVE-2026-59212

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:07+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-2xwm-4h2q-ggfx...

CVE-2026-62323

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:05+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-c3jm-gv5r-9wcp...

Improper Encoding or Escaping of Output

Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the escape or escapeAll process when used with the shell option set to Dash or when the default shell is Dash. An attacker can obtain the user's home...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by unknown CVE via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319527...