137173 matches found
GHSA-5JGF-P345-68V8 fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Impact fast-uri canonicalizes a host to its ASCII form only when the input carries an explicit scheme. When resolve resolves a scheme-relative reference //host/ against a scheme-bearing base, it still emits the host verbatim even though the effective scheme is known, so re-parsing the resolved UR...
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Impact fast-uri canonicalizes a host to its ASCII form only when the input carries an explicit scheme. When resolve resolves a scheme-relative reference //host/ against a scheme-bearing base, it still emits the host verbatim even though the effective scheme is known, so re-parsing the resolved UR...
CLSA-2026-1788362569 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 26 org.springframework packages to address 1 CVE. Fixed in 6.1.4-tuxcare.3...
CLSA-2026-1788361406 TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1...
CLSA-2026-1788360559 TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1...
GHSA-C59Q-G84Q-2GJ5 pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph
Summary The virtual store linker constructs package installation directories using path.joinmodules, pkgName where pkgName is extracted from lockfile packages keys via dp.parsedepPath.name without validation. A crafted pnpm-lock.yaml with traversal sequences in depPath keys e.g.,...
CLSA-2026-1788357718 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 4.4.13-tuxcare.3...
CLSA-2026-1788355153 TuxCare security update for 2 packages (3 CVEs)
TuxCare rebuilt 2 packages to address 3 CVEs. Fixed in 3.2.0-tuxcare.5...
CLSA-2026-1788349507 TuxCare security update for io.airlift:aircompressor (1 CVE)
TuxCare rebuilt io.airlift:aircompressor to address 1 CVE. Fixed in 0.20-tuxcare.1...
CLSA-2026-1788349374 TuxCare security update for dnsjava:dnsjava (1 CVE)
TuxCare rebuilt dnsjava:dnsjava to address 1 CVE. Fixed in 3.5.2-tuxcare.1...
CLSA-2026-1788349330 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.29-tuxcare.9...
CLSA-2026-1788348414 TuxCare security update for twig/twig (1 CVE)
TuxCare rebuilt twig/twig to address 1 CVE. Fixed in v1.44.8-p2+tuxcare...
CLSA-2026-1788348298 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.14.2-tuxcare.2...
ROOT-OS-DEBIAN-12-CVE-2026-34543 CVE-2026-34543 in openexr - Patched by Root
Root has patched CVE-2026-34543 in the openexr package for Root:Debian:12. Multiple fixed versions available...
CLSA-2026-1788347890 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post11+tuxcare...
CLSA-2026-1788345202 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 4.0.2-tuxcare.1...
RHSA-2026:62334 Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:62144 Red Hat Security Advisory: wget security, bug fix, and enhancement update
Bulletin has no description...