Security update for python-pytest-html (important)

openSUSE security update: security update for python-pytest-html ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21602-1 Rating: important References: bsc1275374 bsc1275437 Cross-References: CVE-2026-73088 CVE-2026-73089 CVSS scores: CVE-2026-73088...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.8-0.1.1.hum1 aarch64, x8664 grafana12.4-12.4.8-0.1.1.hum1.src src Security Fixes: grafana12.4: CVE-2026-73086 CVE-2026-73088 CVE-2026-73089...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.3-0.1.1.hum1 aarch64, x8664 grafana13.1-13.1.3-0.1.1.hum1.src src Security Fixes: grafana13.1: CVE-2026-73088 CVE-2026-73089...

CVE-2026-73089

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct queries, context result in cache and every parseQueries AST in parseCache without a size cap, TTL, or eviction, allowing an attacker who...

DEBIAN-CVE-2026-73089

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct queries, context result in cache and every parseQueries AST in parseCache without a size cap, TTL, or eviction, allowing an attacker who...

CVE-2026-73089 Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct queries, context result in cache and every parseQueries AST in parseCache without a size cap, TTL, or eviction, allowing an attacker who...

CVE-2026-73089

CVE-2026-73089 affects Browserslist: prior to 4.28.7, index.js caches every distinct (queries, context) result and every parseQueries() AST in parseCache without a size cap, TTL, or eviction. An attacker who can influence repeated browserslist() query values (including those in the form --) can b...