PT-2026-6321

Name of the Vulnerable Software and Affected Versions HtmlSanitizer versions prior to 9.0.892 HtmlSanitizer versions prior to 9.1.893-beta Description HtmlSanitizer is a .NET library designed to prevent cross-site scripting XSS attacks by cleaning HTML fragments and documents. Before versions...

RockyLinux 8 : kernel-rt (RLSA-2026:1148)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:1148 advisory. kernel: Bluetooth: hcievent: call disconnect callback before deleting conn CVE-2023-53673 kernel: ASoC: Intel: bytcrrt5640: Fix invalid quirk input mappi...

PT-2026-6277

Name of the Vulnerable Software and Affected Versions Qwik versions prior to 1.12.0 Description Qwik is a javascript framework. A regular expression typo within the isContentType function causes incorrect parsing of certain Content-Type headers. Recommendations Update to version 1.12.0 or later...

PT-2026-6282

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0...

CVE-2026-25238: Improper Neutralization of Special Elements used in an SQL Command

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched in version 1.33.0...

CVE-2026-25237: Executable Regular Expression Error

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of pregreplace with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replacement. This issue has been patched in...

Security update for dpdk (moderate)

openSUSE security update: security update for dpdk ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20148-1 Rating: moderate References: bsc1247389 bsc1254161 Cross-References: CVE-2025-23259 CVSS scores: CVE-2025-23259 SUSE : 6.3...

Wikimedia OATHAuth 安全漏洞

Wikimedia OATHAuth is a dual authentication extension developed by the Wikimedia Foundation. Versions of Wikimedia OATHAuth prior to 1.39.14, 1.43.4, and 1.44.1 contained security vulnerabilities, which were caused by a problem with the program file src/Special/OATHManage.Php...

PT-2026-6287

Name of the Vulnerable Software and Affected Versions PEAR versions prior to 1.33.0 Description PEAR is a framework and distribution system for reusable PHP components. A SQL injection issue in bug subscription deletion could allow attackers to inject SQL via a crafted email value. The issue was...

PT-2026-6286

Name of the Vulnerable Software and Affected Versions PEAR versions prior to 1.33.0 Description PEAR, a framework for reusable PHP components, contains a flaw related to the use of the preg replace function with the /e modifier. This can lead to PHP code execution if attacker-controlled content i...

Decidim's private data exports can lead to data leaks

Impact Private data exports can lead to data leaks in cases where the UUID generation causes collisions for the generated UUIDs. The bug was introduced by 13571 and affects Decidim versions 0.30.0 or newer currently 2025-09-23. This issue was discovered by running the following spec several times...

Security update for python-python-multipart (important)

openSUSE security update: security update for python-python-multipart ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20125-1 Rating: important References: bsc1257301 Cross-References: CVE-2026-24486 CVSS scores: CVE-2026-24486 SUSE : 8.2...

ROS-20260203-73-0042

A vulnerability in the phyledtriggers.c component of the Linux operating system kernel is related to improper memory freeing before deleting the last reference. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) (important)

openSUSE security update: security update for the linux kernel live patch 1 for suse linux enterprise 16 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20120-1 Rating: important References: bsc1251982 bsc1252270 bsc1253437 bsc1254196...

Security update for glibc (important)

openSUSE security update: security update for glibc ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20133-1 Rating: important References: bsc1236282 bsc1256436 bsc1256766 bsc1256822 bsc1257005 Cross-References: CVE-2025-0395 CVE-2025-15281...

Security update for elemental-register, elemental-toolkit (important)

openSUSE security update: security update for elemental-register, elemental-toolkit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20132-1 Rating: important References: bsc1241826 bsc1241857 bsc1251511 bsc1251679 bsc1253581 bsc1253901 bsc1254079...

Security update for alloy (important)

openSUSE security update: security update for alloy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20140-1 Rating: important References: bsc1255074 bsc1255333 Cross-References: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 CVE-2025-68156 CVSS scores...

Security update for wireshark (moderate)

openSUSE security update: security update for wireshark ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20151-1 Rating: moderate References: bsc1249090 bsc1251933 bsc1254108 bsc1254471 bsc1254472 bsc1256734 bsc1256738 bsc1256739 Cross-References:...

CVE-2026-25233: Operator Precedence Logic Error

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0...

USN-8001-1: OpenJDK 11 vulnerabilities

It was discovered that the RMI component of OpenJDK 11 would establish RMI TCP endpoint connections to a remote host without setting an endpoint identification algorithm. An unauthenticated remote attacker could possibly use this issue to steal sensitive information. CVE-2026-21925 Mingijung...