CVE-2026-23733

LobeChat is an open source chat application platform. Prior to version 2.0.0-next.180, a stored Cross-Site Scripting XSS vulnerability in the Mermaid artifact renderer allows attackers to execute arbitrary JavaScript within the application context. This XSS can be escalated to Remote Code Executi...

CVE-2026-23733

LobeChat desktop (open source) is affected by a stored XSS in the Mermaid artifact renderer prior to version 2.0.0-next.180. The XSS can be escalated to Remote Code Execution (RCE) by abusing the exposed electronAPI IPC bridge, enabling arbitrary system commands in the victim’s machine. Version 2...

MAL-2026-323 Malicious code in eslint-plugin-fuel-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99675eb06a245907c7a2133cf7d75af3037229a059d0a135bf8c3d518432a6a4 The package eslint-plugin-fuel-react was found to contain malicious code. Source: ossf-package-analysis...

OESA-2026-1090 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000671)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000671 advisory. Multiple stack-based buffer overflows in the Near Field Communication Controller Interface NCI in the Linux kernel before 3.4.5 allow remote attackers to cause a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003735 advisory. An issue was discovered in the Linux kernel before 4.20.15. The nfcllcpbuildtlv function in net/nfc/llcpcommands.c may return NULL. If the caller does not check for...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004075 advisory. A missing CAPNETRAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001475 advisory. A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003651)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003651 advisory. An issue was discovered in the Linux kernel before 4.20.15. The nfcllcpbuildtlv function in net/nfc/llcpcommands.c may return NULL. If the caller does not check for...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003685 advisory. A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000547 advisory. The iucvsockrecvmsg function in net/iucv/afiucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtai...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003930 advisory. In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004296 advisory. In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka...

CVE-2025-71079

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfcunregisterdevice and rfkillfopwrite A deadlock can occur between nfcunregisterdevice and rfkillfopwrite due to lock ordering inversion between devicelock and rfkillglobalmutex. The problematic lo...

firefox: thunderbird: Use-after-free in the IPC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the IPC component...

RLSA-2026:0464 Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack CVE-2025-584...

cups security update

An update is available for cups. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Common UNIX Printing System CUPS provides a portable printing layer for Linu...

net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write

...

Information Leak and DoS Vulnerabilities in Redmi Buds 3 Pro through 6 Pro

Overview Redmi Buds, a series of Bluetooth earbuds produced and sold by Xiaomi, contain an Information Leak vulnerability and a Denial of Service DoS vulnerability in versions 3 Pro through 6 Pro. An attacker within Bluetooth radio range can send specially crafted RFCOMM protocol interactions to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002094 advisory. Multiple stack-based buffer overflows in the Near Field Communication Controller Interface NCI in the Linux kernel before 3.4.5 allow remote attackers to cause a...