137127 matches found
CLSA-2026-1789457514 TuxCare security update for io.undertow (1 CVE)
TuxCare rebuilt 9 io.undertow packages to address 1 CVE. Fixed in 2.0.26.Final-tuxcare.1...
CLSA-2026-1789457016 TuxCare security update for zendframework/zend-form (1 CVE)
TuxCare rebuilt zendframework/zend-form to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
CLSA-2026-1789456962 TuxCare security update for pydantic (1 CVE)
TuxCare rebuilt pydantic to address 1 CVE. Fixed in 1.10.0.post1+tuxcare...
CLSA-2026-1789456930 TuxCare security update for laminas/laminas-diactoros (2 CVEs)
TuxCare rebuilt laminas/laminas-diactoros to address 2 CVEs. Fixed in 1.8.7p2-1+tuxcare...
CLSA-2026-1789456491 TuxCare security update for io.undertow (1 CVE)
TuxCare rebuilt 8 io.undertow packages to address 1 CVE. Fixed in 2.3.17.Final-tuxcare.2...
CLSA-2026-1789456194 TuxCare security update for idna (1 CVE)
TuxCare rebuilt idna to address 1 CVE. Fixed in 3.6.post2+tuxcare...
CLSA-2026-1789455724 TuxCare security update for org.springframework.hateoas:spring-hateoas (2 CVEs)
TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 2 CVEs. Fixed in 2.2.5-tuxcare.1...
CLSA-2026-1789454358 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.4.post7+tuxcare...
CLSA-2026-1789453540 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.9.post6+tuxcare...
CVE-2026-17495
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-17495
moment (a JavaScript date library) versions 2.29.2 through 2.30.1 are vulnerable to a path traversal via a specially crafted non-string object passed to moment.locale(). The guard assumes string input, so an object whose match() method satisfies the check while toString() returns a traversal path...
.NET 8.0 security, bug fix, and enhancement update
8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248...
.NET 9.0 security, bug fix, and enhancement update
9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279...
PT-2026-91861
Name of the Vulnerable Software and Affected Versions moment versions 2.29.2 through 2.30.1 Description A path-traversal issue exists when a specially crafted non-string object is passed to the moment.locale function. The internal guard assumes the input is a string; however, an object with a mat...
Linux Distros Unpatched Vulnerability : CVE-2026-17495
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-stri...
Linux Distros Unpatched Vulnerability : CVE-2026-91991
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject arbitrary cookie attributes by passing capitalize...