PT-2026-41200

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.8.0 Description The endpoint "/api/v1/memories/ef" is accessible without authentication and executes the function request.app.state.EMBEDDING FUNCTION. This allows unauthenticated users to trigger embedding...

PT-2026-83506

Name of the Vulnerable Software and Affected Versions qs versions 6.14.2 through 6.15.3 Description When the qs.parse function is used with the comma and throwOnLimitExceeded options set to true, a comma-separated value assigned to a bracket-push key e.g., a=1,2,3,4 is split into an array without...

@0xlimao/n8n-nodes-ethereum (0.1.1), @advenimuss/n8n-nodes-msgraph (>=0.1.0, <=0.2.1) +356 more potentially affected by CVE-2026-26019 via @langchain/core (>=1.0.1, <=1.1.13)

@langchain/core NPM version =1.0.1, =0.1.0, =1.0.0, =1.2.1, =1.2.2, =1.2.2, =2.2.2, =2.2.2, =2.2.2, =2.1.9, =2.1.0, =2.1.0, =2.1.26 and more Source cves: CVE-2026-26019 Source advisory: SNYK:JS-LANGCHAINCORE-15268429...

poc-ghsa-37qj-frw5-hhjh

PoC: GHSA-37qj-frw5-hhjh — fast-xml-...

CVE-2025-54147

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...

USN-8023-1 libxmltok vulnerabilities

It was discovered that Expat, contained within the xmltok library, incorrectly handled the initialization of parsers for external entities. An attacker could possibly use this issue to cause a denial of service. CVE-2026-24515 It was discovered that Expat, contained within the xmltok library,...

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.14 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

About the security content of watchOS 26.3

About the security content of watchOS 26.3 This document describes the security content of watchOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

CVE-2026-0958

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through memory or CPU exhaustion by bypassing JSON validation middleware limits...

1-sep-ui (>=0.0.1, <=0.0.2), 3d-crystal-model (0.1.0) +7232 more potentially affected by CVE-2025-69873 via ajv (>=6.0.0, <=6.12.6)

ajv NPM version =6.0.0, =0.0.1, =1.0.23, =0.0.1, =1.0.0, =1.0.0, =6.0.0, =0.0.2, =1.0.0, =0.0.10, =0.0.3, =1.0.6, =2.2.0 and more Source cves: CVE-2025-69873 Source advisory: SNYK:JS-AJV-15274295...

RHEL 9 : pcs (RHSA-2026:2484)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2484 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: tornado: Tornado...

RockyLinux 8 : python3.12 (RLSA-2026:2419)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:2419 advisory. cpython: Excessive read buffering DoS in http.client CVE-2025-13836 Tenable has extracted the preceding description block directly from the RockyLinux security...

0.edsql (>=1.0.49, <=1.0.50), 360-lib (1.0.0) +10523 more potentially affected by CVE-2025-69873 via ajv (>=7.0.0, <=8.17.1)

ajv NPM version =7.0.0, =1.0.49, =10.0.2-0, =4.11.2, =0.1.0, =0.1.1, =0.0.1-251008.90016, =0.3.0-rc.3, =1.0.0, =1.4.0, =1.0.0, =0.0.2, =2.0.0, =3.0.0 and more Source cves: CVE-2025-69873 Source advisory: SNYK:JS-AJV-15274295...

Palo Alto Networks PAN-OS 11.2.x < 11.2.10 / 12.1.x < 12.1.4 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.2.x prior to 11.2.10 or 12.1.x prior to 12.1.4. It is, therefore, affected by a vulnerability. A denial-of-service DoS vulnerability in the Advanced DNS Security ADNS feature of Palo Alto Networks PAN-OS software enables an...

PT-2026-7545

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.4 Description A flaw exists in Qsync Central that, if exploited by a remote attacker with a user account, could lead to a denial-of-service DoS attack. The issue is a NULL pointer dereference...

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as havin...

Important: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

Moderate: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.21.1 security and extras update

Red Hat OpenShift Container Platform release 4.21.1 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...