GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: pulumi-language-java, wolfictl, zarf, gitlab-runner, kubo, crossplane-provider-aws-route53, dex, descheduler, crossplane-provider-aws-kms, datadog-agent, mattermost, crossplane-provider-aws-cloudformation, crossplane-provider-aws-iam,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, wolfictl, zarf, gitlab-runner, kubo, crossplane-provider-aws-route53, dex, descheduler, crossplane-provider-aws-kms, datadog-agent, mattermost, crossplane-provider-aws-cloudformation, crossplane-provider-aws-iam,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: buildkite-agent-fips, nova-fips, goose, crossplane-provider-aws-lambda, crossplane-provider-aws-s3, opa-fips, gotenberg, azure-service-operator, crossplane-provider-aws-iam, crossplane-provider-aws-wafv2-fips, melange, sops, ollama-fips, linkerd2, cloudbeat-fips,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: buildkite-agent-fips, nova-fips, goose, crossplane-provider-aws-lambda, crossplane-provider-aws-s3, opa-fips, gotenberg, azure-service-operator, crossplane-provider-aws-iam, crossplane-provider-aws-wafv2-fips, melange, sops, ollama-fips, linkerd2, cloudbeat-fips,...

Important Photon OS Security Update - PHSA-2026-5.0-90-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

CVE-2026-27710

CVE-2026-27710 affects NanaZip prior to fixed versions 6.0.1638.0 and 6.5.1638.0, where the ".NET Single File Application" parser is vulnerable to a denial-of-service due to an integer underflow in header-size calculation, which can trigger an unbounded memory allocation when opening a crafted bu...

CVE-2026-26222

Altec DocLink now maintained by Beyond Limits Inc. version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and is vulnerable to unsafe object unmarshalling,...

CVE-2026-26222 DocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCE

Altec DocLink now maintained by Beyond Limits Inc. version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and is vulnerable to unsafe object unmarshalling,...

PT-2026-21780

Name of the Vulnerable Software and Affected Versions Altec DocLink version 4.0.336.0 Description The software has insecure .NET Remoting endpoints exposed over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and...

CVE-2026-21665

The CVE concerns the Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in the unsupported 2021.2.4 release (build 4.7.3155.0011). It uses deprecated .NET Remoting TCP channels that enable unsafe deserialization of untrusted data. When exposed to an untrust...

CVE-2026-21665

The Print Service component of Fiserv Originate Loans Peripherals formerly Velocity Services in unsupported version 2021.2.4 build 4.7.3155.0011 uses deprecated .NET Remoting TCP channels that allow unsafe deserialization of untrusted data. When these services are exposed to an untrusted network ...

CVE-2026-21218 vulnerabilities

Vulnerabilities for packages: dotnet...

GHSA-QVHC-9V3J-5RFW vulnerabilities

Vulnerabilities for packages: dotnet...

CVE-2026-21218 vulnerabilities

Vulnerabilities for packages: dotnet...

GHSA-QVHC-9V3J-5RFW vulnerabilities

Vulnerabilities for packages: dotnet...

CVE-2026-26282

NanaZip (open source file archiver) is affected by CVE-2026-26282: an out-of-bounds heap read in the .NET Single File bundle header parser due to a missing bounds check. Affected versions are 5.0.1252.0 through prior to 6.0.1630.0; upgrading to 6.0.1630.0 patches the issue. Exploitation would req...

PT-2026-20927

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in .NET Single File bundle header parser due to missing bounds check. Opening a crafted file with NanaZip causes a crash or leaks heap data to the user...