GHSA-HF6X-8P5F-CGMF vulnerabilities

Vulnerabilities for packages: floci, airbyte-platform, apache-nifi, thingsboard, kayenta, apicurio-registry, cassandra-reaper, druid, floci-az, elasticsearch-fips, akhq, elasticsearch...

CVE-2026-53802

rsync before 3.5.0 contains an arbitrary file read vulnerability that...

GHSA-4H4R-Q9XG-GFMM vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59845 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59850 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59847 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-19143 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RHRM-PW3P-V8J2 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-19148 vulnerabilities

Vulnerabilities for packages: chromium...

EUVD-2026-56901

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

CVE-2026-68372

A flaw was found in the Linux kernel's USB Type-C port handling. A local user, by unplugging a Thunderbolt dock, can trigger a race condition during the device teardown process. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has already been...

JLSEC-2026-1250

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

CVE-2026-69244

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue: CVE-2026-15928: reflected cross-site scripting XSS via HTML injection in the error page component bsc1272769. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Linux Distros Unpatched Vulnerability : CVE-2026-68372

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to...

CVE-2026-72878

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's backup and restore pipeline constructs shell commands by directly interpolating user-controlled database fields into bash -c "..." and sh -c "..." strings, then executes them via childprocess.exec. An...

GHSA-6GPP-XCG3-4W24

creationtimestamp| type| source ---|---|--- 2026-08-10 19:39:37+00:00| seen| https://gist.github.com/klemmanton-lgtm/8b54bdd2fe9905dc89b9c8ccf42f5fc4 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/4a24aedae8017b5aebed0300d07c7ee9...

CVE-2026-72878

CVE-2026-72878 : Dokploy before 0.29.13 is vulnerable to OS command injection in the backup/restore pipeline. The system constructs shell commands by directly interpolating user-controlled database fields into bash -c and sh -c strings, then executes them via child_process.exec(), allowing an aut...