Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Network Threat Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION:...

Linux Distros Unpatched Vulnerability : CVE-2026-65898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, kibana, gitlab-rails-ce-fips, opensearch-dashboards, langfuse, opensearch-dashboards-fips, gitlab-rails-ce, wazuh-dashboard, nextcloud-server, wazuh-dashboard-fips...

CVE-2026-65898

creationtimestamp| type| source ---|---|--- 2026-07-23 14:35:05+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cmwh-pvxp-8882...

UBUNTU-CVE-2026-65898

DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared allowlist. Attackers can register a hook that conditionally allows dangerous attributes like onerror for trusted elements,...

1router (>=0.3.96, <=1.0.2), 8router (>=0.5.12, <=0.5.24) +2471 more potentially affected by CVE-2026-65898 via dompurify (>=3.0.0, <=3.4.10)

dompurify NPM version =3.0.0, =0.3.96, =0.5.12, =0.3.33, =0.5.0, =0.4.71, =1.0.0, =1.5.1, =0.18.0-beta.0, =0.0.1, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.0.0-dev-20240828032938, =6.3.4 and more Source cves: CVE-2026-65898 Source advisory: OSV:GHSA-CMWH-PVXP-8882...