MINI-HFR9-RC7P-P8C7

Bulletin has no description...

MINI-6FF7-C96X-94W5

Bulletin has no description...

CVE-2026-44434: Insufficient Verification of Data Authenticity

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit dccf5d4, Quicly was vulnerable to stateless reset injection through lack of packet entry validation. The QUIC protocol is designed to withstand packet injection attacks, once the...

python3.14-pip security update

25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion + remove unused metadata file 25.2-4 - Security fix for CVE-2026-8643: path traversal in wheel entry points...

Alibaba Cloud Linux 3 : 0192: freeipmi (ALINUX3-SA-2026:0192)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0192 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-50031: ipmi-oem in FreeIPMI before 1.6.18...

adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files

Impact adawolfa/isdoc reads ISDOC invoices from ISDOCX ZIP archives and from PDF files with embedded ISDOC documents and supplements. Affected versions inflate ZIP entries and read embedded files without validating their uncompressed size, so a small crafted file can amplify into gigabytes: -...

GHSA-7GCF-G7XR-8HXJ serde_with: KeyValueMap serialization panics on empty sequence or map entries

Summary The public KeyValueMap serializer assumes that each mapped element has at least one field or item to use as the map key, but it subtracts 1 from the caller-visible length before validating that assumption. An application that serializes attacker-controlled data through serdeasas =...

CGA-7RXM-MJ7F-GW33

Bulletin has no description...

CVE-2026-62248

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61438. Reason: This candidate is a duplicate of CVE-2026-61438. Notes: All CVE users should reference CVE-2026-61438 instead of this candidate...

CVE-2026-62165

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61446. Reason: This candidate is a duplicate of CVE-2026-61446. Notes: All CVE users should reference CVE-2026-61446 instead of this candidate...

CVE-2026-62178

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61427. Reason: This candidate is a duplicate of CVE-2026-61427. Notes: All CVE users should reference CVE-2026-61427 instead of this candidate...

CVE-2026-62164

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60087. Reason: This candidate is a duplicate of CVE-2026-60087. Notes: All CVE users should reference CVE-2026-60087 instead of this candidate...

CVE-2026-61605

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-58655. Reason: This candidate is a duplicate of CVE-2026-58655. Notes: All CVE users should reference CVE-2026-58655 instead of this candidate...

CGA-X7HX-7JQ9-5GXW

Bulletin has no description...

CVE-2026-48758

creationtimestamp| type| source ---|---|--- 2026-07-15 12:00:51+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodma5yp2c 2026-07-27 03:18:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwq6g4by2n...

MINI-J8WP-8956-Q4MJ

Bulletin has no description...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to pip

Summary pip is used by IBM Cloud Pak for Data System 1.0 as the Python package installer for managing and installing Python software packages. Multiple vulnerabilities affect pip. CVE-2026-1703 involves a path traversal vulnerability where files from a maliciously crafted wheel archive may be...

ECHO-AB2F-D44E-AB00

Bulletin has no description...

PT-2026-60144

Name of the Vulnerable Software and Affected Versions Grav version 2.0.1 Description A decompression-bomb size-cap bypass exists in ZipArchiver and GPMInstaller. The system calculates the uncompressed size by summing the values declared in each entry's ZIP central-directory header via...

CVE-2026-42447

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary tab because SummaryNode.java appends arches and perArchCount values derived from .so file path components inside an APK into an HTML panel without escaping. A malicious APK wit...