MAL-2026-17180 Malicious code in my-private-pkg (PyPI)

Version 99.1.1 of my-private-pkg executes a custom setuptools install hook while a wheel is built. The hook launches myprivatepkg/index.py, which collects the current username, working directory, hostname, resolved local IP address, operating system, and machine architecture, then attempts to POS...

Malicious code in my-private-pkg (PyPI)

Version 99.1.1 of my-private-pkg executes a custom setuptools install hook while a wheel is built. The hook launches myprivatepkg/index.py, which collects the current username, working directory, hostname, resolved local IP address, operating system, and machine architecture, then attempts to POS...

PT-2026-99007

Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the official repository pointing to an unreviewed personal fork of a contributor with write access. No releases were published with these tags; a project was exposed only if it define...

SUSE CVE-2026-93269

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

galaxy-app (>=23.0.1, <=24.0.3), galaxy-data (>=22.1.1, <=24.1.3) +13 more potentially affected by CVE-2026-57177 via social-auth-core (4.0.3)

social-auth-core PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - galaxy-app =23.0.1, =22.1.1, =23.0.1, =23.0.2, =21.9.0, =23.2.1, =0.4.0, =0.0.1, =0.13.0, =0.6.0, =0.1.0, =0.8.0, =0.1.0, =0.9.1...

umap-project (3.1.0) potentially affected by CVE-2026-57175 via social-auth-core (4.6.1)

social-auth-core PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-core and may be impacted: - umap-project 3.1.0 Source cves: CVE-2026-57175 Source advisory: OSV:GHSA-VQ6G-G6C7-5F2J...

@1sat/actions (>=0.0.173, <=0.0.190), @1sat/cli (>=0.0.75, <=0.0.90) +21 more potentially affected by CVE-2026-56744 via @bsv/wallet-toolbox (>=1.8.3, <=2.1.24)

@bsv/wallet-toolbox NPM version =1.8.3, =0.0.173, =0.0.75, =0.0.42, =0.0.74, =0.0.34, =0.0.30, =0.0.71, =0.0.70, =0.0.3, =0.0.75, =0.0.56, =0.0.47, =0.0.25, =0.0.1, =0.0.6 and more Source cves: CVE-2026-56744 Source advisory: OSV:GHSA-36F9-7RG5-CPF8...

argilla-server (>=1.24.0rc3, <=2.8.0), argus-notification-msteams (0.5.1) +141 more potentially affected by CVE-2026-57175 via social-auth-core (>=0.2.1, <=4.9.1)

social-auth-core PYPI version =0.2.1, =1.24.0rc3, =1.2.1, =4.14.0, =2.1.0rc1, =1.28.0rc1, =0.15.0, =1.234.0, =0.3.23, =0.8.7, =0.0.2a17, =0.1.0, =1.0.0, =1.4.5 and more Source cves: CVE-2026-57175 Source advisory: MEND:CVE-2026-57175...

DEBIAN-CVE-2026-93269

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-93269

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

DEBIAN-CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

UBUNTU-CVE-2026-93252

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

EUVD-2026-86141

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-93269 ext4: fix circular lock dependency in ext4_ext_migrate

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-93269

The Linux kernel contains a circular lock dependency vulnerability in the ext4 filesystem within the ext4_ext_migrate function. The issue arises from a deadlock between s_writepages_rwsem and sb_internal (freeze protection) during concurrent EXT4_IOC_MIGRATE operations and orphan cleanup during m...

CVE-2026-93269 ext4: fix circular lock dependency in ext4_ext_migrate

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

CVE-2026-93268 ext4: skip extra isize expansion during mount to prevent deadlock

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

CVE-2026-93268 ext4: skip extra isize expansion during mount to prevent deadlock

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

CVE-2026-93252 ocfs2: fix circular locking dependency in ocfs2_init_acl()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...