CVE-2026-104853 Nx: Path traversal in nx migrate package-migrations extraction

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package...

CVE-2026-104853

The monorepo solution Nx is vulnerable to a path traversal vulnerability in versions 13.10.0 through 22.7.10 and 23.2.1 . During migration planning, the software reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A host...

CVE-2026-20253

CVE-2026-20253 - Splunk Enterprise ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 승인된 환경에서만 사용하십시오: 로컬 가상 머신 Docker 컨테이너 격리된 실습 환경 승인된 침투 테스트 환경 예제 설정: git clone https://github.com/HORKimhab/CVE-2026-20253 cd CVE-2026-20253 Project use python follow below Create a virtual environment python -m venv venv Activate...

AlmaLinux 9.2 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (ALMALINUX9.2:CLSA-2025:1756929133)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1756929133 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additiona...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1754342893)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1754342893 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without...

CentOS Linux 8.4 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1754413251)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1754413251 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without...

CentOS Linux 8 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1754413156)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1754413156 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk witho...

CentOS Linux 7 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-bzr / git-cvs / etc (CENTOS7:CLSA-2025:1754941109)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1754941109 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional...

CentOS Linux 6 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-cvs / git-daemon / etc (CENTOS6:CLSA-2025:1754381382)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1754381382 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional...

AlmaLinux 9.2 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (ALMALINUX9.2:CLSA-2025:1738833923)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1738833923 advisory. - A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samb...

CVE-2026-20253

🚨 CVE-2026-20253 - 중요한 Splunk Enterprise 무인증 파일 생성 취약점 Splunk Enterprise 및 Splunk Cloud Platform에 영향을 미치는 무인증 임의 파일 생성 및 잘라내기 취약점 📖 요약 CVE-2026-20253 은 Splunk Enterprise 및 Splunk Cloud Platform의 중요한 취약점으로, 노출된 PostgreSQL 사이드카 서비스 엔드포인트를 통해 인증되지 않은 원격 공격자가 임의 파일을 생성하거나 잘라낼 수 있습니다. 취약한 기능에 인증 제어가 없...

GHSA-FX76-2J3W-2MX6 podman quadlet install --replace does not fully replace the old file

Impact When running podman quadlet install --replace to replace a Quadlet file, if the original Quadlet is larger than the new Quadlet, the file would not be truncated and content from the original would be preserved. There is no risk of information leakage as the user already had access to the...

EUVD-2026-58187

podman quadlet install --replace does not fully replace the old file...

podman quadlet install --replace does not fully replace the old file

Impact When running podman quadlet install --replace to replace a Quadlet file, if the original Quadlet is larger than the new Quadlet, the file would not be truncated and content from the original would be preserved. There is no risk of information leakage as the user already had access to the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124471 advisory. Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files...

OESA-2026-3880 git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links,...

Astra Linux – Vulnerability in Samba

A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions, when the Samba VFS module “aclxattr” is configured with “aclxattr:ignore system acls = yes”. The SMB protocol allows opening files when the client requests read-only...

Astra Linux – Vulnerability in libhttp-daemon-perl

Versions of HTTP::Daemon prior to version 6.17 for Perl allow for OS command injection through the sendfile function. The sendfile function opens its string argument using Perl’s two-argument open syntax. This two-argument syntax interprets certain magic prefixes: '| cmd' and 'cmd |' open a pipe ...

Linux Distros Unpatched Vulnerability : CVE-2026-89723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix slab-out-of-bounds in nilfsdirectpropagate after truncation Shuangpeng Bai reported that KASAN detected a slab-out-of-bounds error in...

Linux Distros Unpatched Vulnerability : CVE-2026-89639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: use cifsinvalidatecache in cifsdotruncate for OTRUNC cifsdotruncate is invoked from cifsopen without irwsem, so it cannot use cifsresizefilelocked to...