Apache Camel path traversal vulnerability

A security vulnerability exists in Apache Camel Docling versions prior to 4.15.0 and 4.19.0 up to 4.22.2. This vulnerability stems from improper normalization of the CamelDoclingOutputFilePath header value; absolute paths or paths containing “..” segments can be accepted directly without any...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from parsing issues in directory path handling, potentially allowing applications to modify...

Apple MacOS: CVE-2026-112442: OS X update for PackageKit

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS versions prior to Golden Gate 27.2 and Tahoe 26.7.2. This vulnerability stems from file isolation bypass, which may allow applications to bypass Gatekeeper checks...

Debian dla-4862 : inkscape - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4862 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4862-1 [email protected] https://www.debian.org/lts/security/...

CentOS Linux 7 [TuxCare] Security Update: flatpak / flatpak-builder / flatpak-devel / flatpak-libs (CENTOS7:CLSA-2026:1792770859)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792770859 advisory. - A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause...

F5 Networks BIG-IP : SFTP vulnerability (K000163738)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163738 advisory. sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when sftp server:/path . is...

ALSA-2026:90424 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

ALSA-2026:89761 Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...

ALSA-2026:90462 Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...

RHEL 10 : skopeo (RHSA-2026:89761)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89761 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

PT-2026-123164

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution...

Maltego Windows Installer security vulnerability

A security vulnerability exists in Maltego Windows Installer version 4.13.0. This vulnerability stems from issues in the executable file parsing logic and may allow local attackers to execute arbitrary code...

Webasyst Framework backlink vulnerability

Webasyst Framework versions 4.4.0 and earlier contain a backlink vulnerability. This vulnerability arises because waArchiveTar::writeItem fails to validate the target of links; it creates symbolic links from theme archives. Authenticated users with theme management privileges can upload themes...

GStreamer processing logic error vulnerability

Versions of GStreamer Editing Services prior to 1.28.8 contain a logic error vulnerability. This vulnerability arises because GES project files can embed arbitrary GStreamer pipeline descriptions as effect definitions. During loading, there is no restriction on the elements and attributes that ca...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from file isolation bypass, potentially allowing maliciously crafted ZIP archives to bypass...

Oray Pugongying X5 Pro permission and access control issue vulnerability

The Oray Pugongying X5 Pro version 7.6.1 contains a security vulnerability. This vulnerability stems from improper handling of the pppdoptions parameter in the plugininit function within the /tmp/uploadfiles file in the PPTP/E WAN Setting Handler component. As a result, unrestricted file uploads...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from file isolation bypass, which may allow applications to bypass Gatekeeper checks...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27. This vulnerability stems from improper path validation and may lead to path traversal, allowing malicious applications to delete files they do not have permission to remove...

Apple MacOS: CVE-2026-64789: OS X update for quarantine

This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may bypass Gatekeeper checks...