Security Bulletin: IBM DB2 Developer Extension is affected due to vulnerability in Spring boot Core (CVE-2026-41848)

Summary IBM DB2 Developer Extension is affected due to vulnerability in Spring boot Core CVE-2026-41848 Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to provide a pattern which i...

Security Bulletin: Vulnerability in Spring Boot affects DB2 Dev Extension (CVE-2026-40992, CVE-2026-41001)

Summary Upgraded spring-boot-autoconfigure to 3.5.15 to remediate CVE-2026-40992 Improper Certificate Validation and CVE-2026-41001 Insecure Temporary File — highest CVSS Base Score 5.3 Medium — PVR0789890. Vulnerability Details CVEID:CVE-2026-40992 DESCRIPTION: Spring Boot's Mail...

SUSE CVE-2026-89964

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security (2.2.0), org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security-4 (2.2.0) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.7.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security 2.2.0 -...

io.github.knowstack:kf-job-spring-boot-starter (>=1.0.0, <=2.0.2), io.github.knowstack:kf-security-test (1.0.0) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.github.knowstack:kf-job-spring-boot-starter =1.0.0, =1.0.26, =1.24.0, =1.24.0, =1.25...

sanic-authz (1.0.0), sanic-boot (0.0.4.2) potentially affected by CVE-2026-85077 via sanic (25.3.0)

sanic PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-authz 1.0.0 - sanic-boot 0.0.4.2 Source cves: CVE-2026-85077 Source advisory: SNYK:PYTHON-SANIC-20046660...

sanic-boot (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-85077 via sanic (24.6.0)

sanic PYPI version 24.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-boot =0.0.2, =0.0.4 Source cves: CVE-2026-85077 Source advisory: SNYK:PYTHON-SANIC-20046660...

sanic-boot (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-85078 via sanic (24.6.0)

sanic PYPI version 24.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-boot =0.0.2, =0.0.4 Source cves: CVE-2026-85078 Source advisory: GHSA-WMJ6-G64G-J7Q5...

sanic-boot (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-85078 via sanic (24.6.0)

sanic PYPI version 24.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-boot =0.0.2, =0.0.4 Source cves: CVE-2026-85078 Source advisory: SNYK:PYTHON-SANIC-20046661...

sanic-boot (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-85078 via sanic (24.6.0)

sanic PYPI version 24.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-boot =0.0.2, =0.0.4 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...

sanic-authz (1.0.0), sanic-boot (0.0.4.2) potentially affected by CVE-2026-85078 via sanic (25.3.0)

sanic PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-authz 1.0.0 - sanic-boot 0.0.4.2 Source cves: CVE-2026-85078 Source advisory: SNYK:PYTHON-SANIC-20046661...

com.github.cloudfoundry-community:snotel (>=0.3.m1, <=0.3.m3), com.github.cloudfoundry-community:snotel-spring-boot-config (>=0.3.m1, <=0.3.m3) +6 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.8.0)

com.squareup.wire:wire-runtime MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.cloudfoundry-community:snotel =0.3.m1, =0.3.m1, =0.3.m1, =0.6.0beta, =0.0.3, =0.0.4 Sour...

sanic-authz (1.0.0), sanic-boot (0.0.4.2) potentially affected by CVE-2026-85078 via sanic (25.3.0)

sanic PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-authz 1.0.0 - sanic-boot 0.0.4.2 Source cves: CVE-2026-85078 Source advisory: MEND:CVE-2026-85078...

sanic-authz (1.0.0), sanic-boot (0.0.4.2) potentially affected by CVE-2026-85077 via sanic (25.3.0)

sanic PYPI version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - sanic-authz 1.0.0 - sanic-boot 0.0.4.2 Source cves: CVE-2026-85077 Source advisory: MEND:CVE-2026-85077...

PT-2026-94548

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the ntfs init from boot function within the ntfs3 file system. The issue occurs during the validation of Master File Table MFT cluster numbers read from the...

CVE-2026-89964 parisc: eisa: Fix infinite loop when parsing invalid IRQ value

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

CVE-2026-89964

CVE-2026-89964 affects the Linux kernel on the parisc architecture, specifically the EISA (Extended Industry Standard Architecture) IRQ setup function eisa_irq_setup(). When an invalid value is supplied via the eisa_irq_edge= kernel command-line parameter (e.g., eisa_irq_edge=16,5), the function ...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring boot (CVE-2026-40974)

Summary IBM Db2 Developer Extension is affected by vulnerability in spring boot CVE-2026-40974 Vulnerability Details CVEID:CVE-2026-40974 DESCRIPTION: Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spri...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring boot (CVE-2026-40972)

Summary IBM Db2 Developer Extension is affected by vulnerability in spring boot CVE-2026-40972 Vulnerability Details CVEID:CVE-2026-40972 DESCRIPTION: An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. ...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring boot (CVE-2026-40973, CVE-2026-40975, CVE-2026-40977)

Summary IBM Db2 Developer Extension is affected by vulnerability in spring boot CVE-2026-40973, CVE-2026-40975, CVE-2026-40977 Vulnerability Details CVEID:CVE-2026-40973 DESCRIPTION: A local attacker on the same host as the application may be able to take control of the directory used by...