org.wildfly.core:wildfly-core-feature-pack-common (28.0.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (28.0.0.beta1) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (28.0.0.beta1)

org.wildfly.core:wildfly-elytron-integration MAVEN version 28.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 28.0.0.beta1 -...

org.wildfly.core:wildfly-core-feature-pack-common (28.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (28.0.0.beta3) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (28.0.0.beta3)

org.wildfly.core:wildfly-elytron-integration MAVEN version 28.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 28.0.0.beta3 -...

org.wildfly.core:wildfly-core-feature-pack-common (29.0.0.beta2), org.wildfly.core:wildfly-core-galleon-pack (29.0.0.beta2) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (29.0.0.beta2)

org.wildfly.core:wildfly-elytron-integration MAVEN version 29.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 29.0.0.beta2 -...

org.wildfly.core:wildfly-core-feature-pack-common (29.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (29.0.0.beta3) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (29.0.0.beta3)

org.wildfly.core:wildfly-elytron-integration MAVEN version 29.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 29.0.0.beta3 -...

org.wildfly.core:wildfly-core-feature-pack-common (29.0.0.beta5), org.wildfly.core:wildfly-core-galleon-pack (29.0.0.beta5) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (29.0.0.beta5)

org.wildfly.core:wildfly-elytron-integration MAVEN version 29.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 29.0.0.beta5 -...

org.wildfly.core:wildfly-core-feature-pack-common (29.0.0.final), org.wildfly.core:wildfly-core-galleon-pack (29.0.0.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (29.0.0.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 29.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 29.0.0.final -...

org.wildfly.core:wildfly-core-feature-pack-common (30.0.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (30.0.0.beta1) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (30.0.0.beta1)

org.wildfly.core:wildfly-elytron-integration MAVEN version 30.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 30.0.0.beta1 -...

org.wildfly.core:wildfly-core-feature-pack-common (>=31.0.0.beta1, <=31.0.2.final), org.wildfly.core:wildfly-core-galleon-pack (>=31.0.0.beta1, <=31.0.2.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (>=31.0.0.beta1, <=31.0.2.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version =31.0.0.beta1, =31.0.0.beta1, =31.0.0.beta1, =31.0.0.beta1, =39.0.0.beta1, =39.0.0.beta1, =39.0.0.beta1, =39.0.0.final Source cves: CVE-2025-23368 Source advisory: OSV:GHSA-QHP6-6P8P-2RQH...

org.wildfly.core:wildfly-core-feature-pack-common (23.0.3.final), org.wildfly.core:wildfly-core-galleon-pack (23.0.3.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (23.0.3.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 23.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 23.0.3.final -...

CVE-2026-23112

creationtimestamp| type| source ---|---|--- 2026-02-13 14:21:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116063764118245130 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/ 2026-03-16 03:00:00+00:00| seen|...

Mattermost doesn't properly validate channel membership at the time of data retrieval

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via a race condition in the /commonteams API endpoint. An attacker can gain unauthorized access to team names by exploiting the timing of channel membership validation during data retrieva...

GHSA-2XF7-HMF6-P64J Mattermost doesn't properly validate channel membership at the time of data retrieval

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issues: CVE-2026-0861: Fixed that inadequate size check in the memalign suite may result in an integer overflow bsc1256913 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

CVE-2026-20796

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

CVE-2026-20796

Mattermost CVE-2026-20796 affects version 10.11.x up to 10.11.9, due to improper validation of channel membership at data retrieval. A race condition in the /common_teams API endpoint can allow a deactivated user to learn team names they should not access. Root cause: insufficient validation duri...

CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-8034-1)

"The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8034-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...