MINI-83RX-6HHX-P67Q

Bulletin has no description...

ECHO-14E3-A93D-99BA

Bulletin has no description...

ECHO-74B5-8029-1A64

Bulletin has no description...

PT-2026-45490

Name of the Vulnerable Software and Affected Versions rattler versions prior to 0.43.2 pixi versions prior to 0.69.0 rattler-build versions prior to 0.65.0 py-rattler affected versions not specified Description The EntryPoint::FromStr function in rattler conda types only applies a .trim operation...

PT-2026-47753

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 13031fb6b835 Description A critical guest-to-host escape flaw, dubbed ITScape, exists in the Kernel-based Virtual Machine KVM for ARM64, specifically within the vGIC-ITS Interrupt Translation Service emulation...

PT-2026-45453

FlexRIC v2.0.0 contains a reachable assertion in the iApp message dispatcher. The dispatcher validates incoming E2AP messages against a 9-entry whitelist using assert. A remote unauthenticated attacker can send any decodable E2AP PDU with a message type not in the whitelist to crash the iApp...

CVE-2026-8643: Improper Limitation of a Pathname to a Restricted Directory

pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory...

MINI-5223-FHG3-29Q3

Bulletin has no description...

MINI-8HP2-QFPF-W4FG

Bulletin has no description...

MINI-6R69-332C-HVW4

Bulletin has no description...

MINI-MM37-MGPV-VR29

Bulletin has no description...

CGA-5PRX-QG89-R4R8

Bulletin has no description...

CGA-C62R-25JR-FMQG

Bulletin has no description...

ECHO-94BD-88BB-49FE

Bulletin has no description...

ECHO-469F-CB12-A292

Bulletin has no description...

ECHO-BD26-AB2E-1D6D

Bulletin has no description...

ECHO-BA9E-EE69-2AC3

Bulletin has no description...

Chromium: CVE-2026-9878 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

uv is vulnerable to arbitrary file write through entry point names

Impact In versions of uv prior to 0.11.15, when installing a distribution containing an entry point specification under consolescripts or guiscripts, uv would place the generated entry point according to the given name even if doing so resulted in a path outside of the environment's scripts...

GHSA-4GG8-GXPX-9RPH uv is vulnerable to arbitrary file write through entry point names

Impact In versions of uv prior to 0.11.15, when installing a distribution containing an entry point specification under consolescripts or guiscripts, uv would place the generated entry point according to the given name even if doing so resulted in a path outside of the environment's scripts...