BELL-CVE-2026-43237

Bulletin has no description...

BELL-CVE-2026-43224

Bulletin has no description...

BELL-CVE-2026-43188

Bulletin has no description...

BELL-CVE-2026-43122 CVE-2026-43122 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43160

Bulletin has no description...

BELL-CVE-2026-43096 CVE-2026-43096 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43465

Bulletin has no description...

BELL-CVE-2026-43431 CVE-2026-43431 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43454

Bulletin has no description...

BELL-CVE-2026-43364

Bulletin has no description...

BELL-CVE-2026-43385 CVE-2026-43385 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2025-71296

Bulletin has no description...

CVE-2026-42560 auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation

auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the same local user.ID, instead of deriving a unique ID from the Patreon account returned by Patreon. ...

EUVD-2026-28904

auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the same local user.ID, instead of deriving a unique ID from the Patreon account returned by Patreon. ...

CVE-2026-31721 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-31721 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23374 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-23374 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2

CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

GHSA-V632-2M87-7469 Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs

Spring AI's MilvusVectorStoredoDeleteList implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through latest 1.0.x; upgrade to 1.0.7 or greater. Spring AI 1.1.x: affected from 1.1.0 through latest 1.1.x; upgrade to 1.1.6 o...