Maestro 0.15.4

Maestro is a cross-platform desktop app for orchestrating your fleet of AI agents and projects. It's a high-velocity solution for hackers who are juggling multiple projects in parallel. Designed for power users who live on the keyboard and rarely touch the mouse. Collaborate with AI to create...

Updated nano packages fix security vulnerabilities

Local attacker can inject malicious .desktop launcher due to insecure directory permissions. CVE-2026-6842 Format string vulnerability leads to denial of service. CVE-2026-6843...

MGASA-2026-0121 Updated nano packages fix security vulnerabilities

Local attacker can inject malicious .desktop launcher due to insecure directory permissions. CVE-2026-6842 Format string vulnerability leads to denial of service. CVE-2026-6843...

PT-2026-38362

Name of the Vulnerable Software and Affected Versions Claude Desktop versions 1.2581.0 through 1.4303.0 Description The SSH remote development feature fails to compare the server's presented host key against the stored key, verifying only if the hostname exists in the /.ssh/known hosts file. This...

ZTE Cloud PC Client uSmartView: Format string error vulnerability

The ZTE Cloud PC client uSmartView is a cloud desktop remote access client software developed by ZTE Corporation. The ZTE Cloud PC client uSmartView has a vulnerability related to formatted strings. This vulnerability may lead to memory corruption and remote denial of service attacks...

Wireshark RDP DoS

The vulnerability of the rdp8decompresssegment function in the RDP protocol analysis tool for computer network traffic analysis in Wireshark is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failur...

@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8), @manniwatch/client-desktop (>=0.30.0, <=0.30.1) +2 more potentially affected by CVE-2026-44437 via @angular/ssr (>=19.0.5, <=19.2.19)

@angular/ssr NPM version =19.0.5, =1.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2026-44437 Source advisory: GHSA-69XR-M8H6-H664...

RHSA-2026:13867 Red Hat Security Advisory: rh-podman-desktop security update

Bulletin has no description...

IBM Langflow Desktop path traversal vulnerability

IBM Langflow Desktop is a graphical-based AI workflow development tool, primarily used for building and deploying AI applications. IBM Langflow Desktop has a path traversal vulnerability. This vulnerability stems from an improper handling of the "..." sequence in URL requests. An attacker can...

IBM Langflow Desktop file traversal vulnerability

IBM Langflow Desktop is a graphical-based AI workflow building tool, primarily used for low-code development of AI applications. IBM Langflow Desktop has a path traversal vulnerability. This vulnerability stems from the failure to properly validate the path parameters in URL requests provided by...

CVE-2026-7701

A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/urlauthbox.cpp of the component Bot API. The manipulation of the argument loginurl leads to null pointer dereference. It is...

Important: Red Hat Security Advisory: rh-podman-desktop security update

An update for rh-podman-desktop is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

avaintegration-metapackage (>=6.0.4.3, <=6.0.4.13), bravoserver (3.1.0) +31 more potentially affected by CVE-2026-6907 via django (>=6.0.0, <=6.0.4)

django PYPI version =6.0.0, =6.0.4.3, =2.0.0, =1.1.0, =0.70.2, =0.1.0b2, =0.1.2, =0.1.4 and more Source cves: CVE-2026-6907 Source advisory: GHSA-5HRC-GVXJ-W55P...

avaintegration-metapackage (>=6.0.4.3, <=6.0.4.13), bravoserver (3.1.0) +31 more potentially affected by CVE-2026-6907 via django (>=6.0.0, <=6.0.4)

django PYPI version =6.0.0, =6.0.4.3, =2.0.0, =1.1.0, =0.70.2, =0.1.0b2, =0.1.2, =0.1.4 and more Source cves: CVE-2026-6907 Source advisory: OSV:GHSA-5HRC-GVXJ-W55P...

avaintegration-metapackage (>=6.0.4.3, <=6.0.4.13), bravoserver (3.1.0) +31 more potentially affected by CVE-2026-5766 via django (>=6.0.0, <=6.0.4)

django PYPI version =6.0.0, =6.0.4.3, =2.0.0, =1.1.0, =0.70.2, =0.1.0b2, =0.1.2, =0.1.4 and more Source cves: CVE-2026-5766 Source advisory: OSV:PYSEC-2026-54...

avaintegration-metapackage (>=6.0.4.3, <=6.0.4.13), bravoserver (3.1.0) +31 more potentially affected by CVE-2026-6907 via django (>=6.0.0, <=6.0.4)

django PYPI version =6.0.0, =6.0.4.3, =2.0.0, =1.1.0, =0.70.2, =0.1.0b2, =0.1.2, =0.1.4 and more Source cves: CVE-2026-6907 Source advisory: MEND:CVE-2026-6907...

RHEL 10 : rh-podman-desktop (RHSA-2026:13867)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:13867 advisory. Red Hat build of Podman Desktop is a graphical tool for managing containers using Podman. It allows users to run, manage, and configure containers...

memegen-desktop (>=0.0.1, <=0.1.1), moca (0.3.3) +1 more potentially affected by CVE-2026-42308 via pillow (3.3.1)

pillow PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - memegen-desktop =0.0.1, =0.0.4.dev68, =0.0.5.dev3 Source cves: CVE-2026-42308 Source advisory: OSV:GHSA-WJX4-4JCJ-G98J...

CVE-2026-5405

A flaw was found in the RDP protocol dissector in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing a heap-based buffer overflow, resulting in a denial of service or potentially in code execution. Mitigation If the RDP protocol dissector is n...

CVE-2026-42090

Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in the note export flow can be escalated to remote code execution in the desktop app. The root cause is...