MiracleLinux 8 : nodejs:22 (AXSA:2026-1453:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1453:01 advisory. ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation

A flaw was found in Apache Thrift Python bindings. This vulnerability, stemming from improper validation of certificates with host mismatch, could allow a remote attacker to intercept and access sensitive information. The issue occurs when the Python client fails to adequately verify the server's...

SUSE CVE-2026-54522

MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Bufferclear in ext/msgpack/buffer.c leaves rmemlast, rmemend, and rmemowner stale after msgpackbuffershiftchunk returns an rmem page to the shared pool, allowing a subsequent...

CVE-2026-65802 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-65802

CVE-2026-65802 affects Microsoft Edge for Android. The vulnerability is described as external control of a file name or path that enables an unauthorized attacker to disclose information over a network. It is network‑accessible with low attack complexity, no privileges required, but user interact...

CVE-2026-65802

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...

CVE-2026-65802 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-66314

Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-66314 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-66314

Microsoft Edge (Chromium-based) is affected by a time-of-check time-of-use (TOCTOU) race condition that could allow an unauthenticated attacker to disclose information over a network. The vulnerability impacts the browser’s ability to protect data during network interactions. Root cause described...

CVE-2026-66314 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-66310

Microsoft Edge for Android is affected by CVE-2026-66310, described as external control of a file name or path that allows an unauthorized local attacker to disclose information. The vulnerability is labeled with CVSS v3.1 base score 7.7 (HIGH), with attack vector LOCAL, all else equal; no user i...

CVE-2026-66310 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-66310 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-66318 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-66318 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-66318

CVE-2026-66318 affects Microsoft Edge (Chromium-based). Description: origin validation error may allow an unauthorized attacker to disclose information over a network. Metrics indicate CVSS v3.1 Base Score 8.1 (High) with network attack vector, low attack complexity, no privileges required, but u...

CVE-2026-66318

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-67338

A flaw was found in JupyterLab. The Extension Manager fails to validate URI protocols in package metadata URLs. This allows attackers to publish malicious PyPI packages containing javascript: URLs in their project metadata. When a user clicks on the extension name, arbitrary JavaScript code can b...

CVE-2026-18682

A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api/upload of the component File Upload API. The manipulation of the argument File results in cross site scripting. The attack may be performed from remote. A high complexity level...