137127 matches found
CLSA-2026-1789474443 TuxCare security update for org.apache.httpcomponents.client5 (1 CVE)
TuxCare rebuilt 6 org.apache.httpcomponents.client5 packages to address 1 CVE. Fixed in 5.0.3-tuxcare.1...
CLSA-2026-1789472298 TuxCare security update for @ai-sdk/provider-utils (1 CVE)
TuxCare rebuilt @ai-sdk/provider-utils to address 1 CVE. Fixed in 3.0.27-tuxcare.1...
CLSA-2026-1789467187 TuxCare security update for 3 packages (1 CVE)
TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 9.20.3-tuxcare.1...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.38 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.38 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.33 bug fix and security update
Red Hat OpenShift Container Platform release 4.21.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
CLSA-2026-1789465861 TuxCare security update for valibot (2 CVEs)
TuxCare rebuilt valibot to address 2 CVEs. Fixed in 0.41.0-tuxcare.1...
CLSA-2026-1789465375 TuxCare security update for launch-editor (2 CVEs)
TuxCare rebuilt launch-editor to address 2 CVEs. Fixed in 2.2.1-tuxcare.1...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.14 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
CLSA-2026-1789461261 TuxCare security update for 22 packages (1 CVE)
TuxCare rebuilt 22 packages to address 1 CVE. Fixed in 16.0.6-tuxcare.9...
CLSA-2026-1789457514 TuxCare security update for io.undertow (1 CVE)
TuxCare rebuilt 9 io.undertow packages to address 1 CVE. Fixed in 2.0.26.Final-tuxcare.1...
CLSA-2026-1789457016 TuxCare security update for zendframework/zend-form (1 CVE)
TuxCare rebuilt zendframework/zend-form to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
CLSA-2026-1789456962 TuxCare security update for pydantic (1 CVE)
TuxCare rebuilt pydantic to address 1 CVE. Fixed in 1.10.0.post1+tuxcare...
CLSA-2026-1789456930 TuxCare security update for laminas/laminas-diactoros (2 CVEs)
TuxCare rebuilt laminas/laminas-diactoros to address 2 CVEs. Fixed in 1.8.7p2-1+tuxcare...
CLSA-2026-1789456491 TuxCare security update for io.undertow (1 CVE)
TuxCare rebuilt 8 io.undertow packages to address 1 CVE. Fixed in 2.3.17.Final-tuxcare.2...
CLSA-2026-1789456194 TuxCare security update for idna (1 CVE)
TuxCare rebuilt idna to address 1 CVE. Fixed in 3.6.post2+tuxcare...
CLSA-2026-1789455724 TuxCare security update for org.springframework.hateoas:spring-hateoas (2 CVEs)
TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 2 CVEs. Fixed in 2.2.5-tuxcare.1...
CLSA-2026-1789454358 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.4.post7+tuxcare...
CLSA-2026-1789453540 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.9.post6+tuxcare...
CVE-2026-17495
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...