firefox: thunderbird: Use-after-free in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine component...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine component...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component...

EUVD-2025-209282

An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical SPI interface fails to enforce write protection on the program call stack. An attacker with physical access to the SPI...

CVE-2026-35517

Pi-hole FTL (FTLDNS) contains a Remote Code Execution flaw from 6.0 up to before 6.6 in the upstream DNS servers configuration (dns.upstreams). An authenticated attacker can inject arbitrary dnsmasq directives via newline characters, leading to command execution on the host. The issue is fixed in...

Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access

A high-severity security vulnerability has been disclosed in Docker Engine that could permit an attacker to bypass authorization plugins AuthZ under specific circumstances. The vulnerability, tracked as CVE-2026-34040 CVSS score: 8.8, stems from an incomplete fix for CVE-2024-41110, a...

EUVD-2026-19676

FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, Pi-hole FTL supports a CLI password feature webserver.api.clipw that creates “CLI” API sessions intended to be read-only for configuration changes. While /api/config...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

zantetsu-trainer is unmaintained

The zantetsu-trainer crate is no longer maintained. The ML training infrastructure it contained was removed as part of the zantetsu 0.2 release, which replaced the neural parser with a pure heuristic engine. A tombstone version 0.2.0 has been published and 0.1.4 has been yanked. There is no...

aphrodite-engine (>=0.6.0, <=0.6.2), autodatagen (0.0.1) +3 more potentially affected by CVE-2026-1839 via transformers (4.44.1)

transformers PYPI version 4.44.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aphrodite-engine =0.6.0, =0.8.12, =1.0.5, =1.0.9 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

artificial-detection (0.1.0), benchformer (0.0.1.dev1) +1 more potentially affected by CVE-2026-1839 via transformers (4.12.3)

transformers PYPI version 4.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - artificial-detection 0.1.0 - benchformer 0.0.1.dev1 - tai-chi-engine =0.0.4, =0.0.6 Source cves: CVE-2026-1839 Source advisory:...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2026-1839 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2026-1839 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

aphrodite-engine (>=0.6.0, <=0.6.2), autodatagen (0.0.1) +3 more potentially affected by CVE-2026-1839 via transformers (4.44.1)

transformers PYPI version 4.44.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aphrodite-engine =0.6.0, =0.8.12, =1.0.5, =1.0.9 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

firefox security update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

RHEL 8 : thunderbird (RHSA-2026:6917)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:6917 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine...

PT-2026-31483

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A type confusion issue exists in the V8 JavaScript engine. This allows a remote attacker to execute arbitrary code inside a sandbox by utilizing a specially crafted HTML page. Type...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and...