cn.hyperchain.javasdk:hyperchainsdk (>=4.2.1, <=4.2.3), com.blitz-chain:blitz-chain (1.2) +80 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-jdk14 (>=1.47, <=1.85)

org.bouncycastle:bcpkix-jdk14 MAVEN version =1.47, =4.2.1, =9.1.20, =2.0, =2.0, =2.0, =0.1.1, =ibanity-java-1.1.20180605145337, =2.2, =2.0.1, =7.0-rc2, =1.5, =12.3, =22.2.3 and more Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536906...

[SECURITY] Fedora 45 Update: gnustep-base-1.31.0-11.fc45

The GNUstep Base Library is a powerful fast library of general-purpose, non-graphical Objective C classes, inspired by the superb OpenStep API but implementing Apple and GNU additions to the API as well. It includes for example classes for unicode strings, arrays, dictionaries, sets, byte streams...

Malicious code in ui-base-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7251d8342fbc78bb25925a713153e0bd22f820c678fde7e2ffa0db10fbd151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in translate-base-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0c647653ce1698d15162d24ea22d9b060d770daf28277f3ce27a0040dda6dc The package presents itself as a CSS custom-property polyfill for font translation, but its actual behavior is a browser-side code-smuggling vector...

MAL-2026-17458 Malicious code in translate-base-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0c647653ce1698d15162d24ea22d9b060d770daf28277f3ce27a0040dda6dc The package presents itself as a CSS custom-property polyfill for font translation, but its actual behavior is a browser-side code-smuggling vector...

MAL-2026-17459 Malicious code in ui-base-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7251d8342fbc78bb25925a713153e0bd22f820c678fde7e2ffa0db10fbd151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-97876

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

CVE-2026-97876 Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

CVE-2026-97876 Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

CVE-2026-97876

A flaw in GRUB2 allows a local attacker with control over the boot configuration to bypass Secure Boot lockdown restrictions. The root cause is the insufficient validation of the MMIO base address passed to the serial command; GRUB fails to verify that the address corresponds to a legitimate UART...

CVE-2026-97876 Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

CVE-2026-97876

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

SUSE CVE-2022-29799

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the "/etc/networkd-dispatcher" base directory...

EUVD-2026-91139

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

EUVD-2026-91076

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed...

GHSA-QQW9-2VJ9-HX7R Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w584-2h2r-2hvf. This link is maintained to preserve external references. Original Description langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code remote. The compone...

AZL-107954 CVE-2026-86345 affecting package 389-ds-base 3.1.1-12

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

DEBIAN-CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

UBUNTU-CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...