ROOT-OS-UBUNTU-2404-CVE-2025-21820 CVE-2025-21820 in linux - Patched by Root

Root has patched CVE-2025-21820 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-68188 CVE-2025-68188 in linux - Patched by Root

Root has patched CVE-2025-68188 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-53140 CVE-2026-53140 in linux - Patched by Root

Root has patched CVE-2026-53140 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

Astra Linux – Vulnerability in ffmpeg

In FFmpeg 4.4, the file libavcodec/dnxhddec.c does not check the return value of the initvlc function. This is a similar issue to CVE-2013-0868...

EUVD-2026-55021

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

SUSE SLES15: libavcodec58_134 / libavformat58_76 / libavutil56_70 / etc (SUSE-SU-2026:3529-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3529-1 advisory. Update to release 4.4.8. - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code...

CVE-2026-65559

The CVE relates to a privilege-escalation issue in the WordPress plugin Order Delivery Date for WooCommerce, affecting versions up to 4.6.0. The vulnerability targets the shop manager role within the plugin’s delivery date functionality. The provided data constrain the impact to a privilege escal...

CVE-2026-16993 DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads Directory

The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not protect its shipping-label storage directory with server-independent access control, relying only on an Apache .htaccess file, so on a web server that does not honor .htaccess such as nginx an unauthenticated visitor...

NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API

NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API vulnerability discovered by ? in WordPress Npm ghost versions 6.54.1...

CLSA-2026-1784769619 TuxCare security update for ws (5 CVEs)

TuxCare rebuilt ws to address 5 CVEs. Fixed in 4.1.0-tuxcare.2...

CLSA-2026-1784596264 TuxCare security update for io.netty (8 CVEs)

TuxCare rebuilt 47 io.netty packages to address 8 CVEs. Fixed in 4.1.117.Final-tuxcare.2...

CLSA-2026-1784250520 TuxCare security update for lodash (7 CVEs)

TuxCare rebuilt lodash to address 7 CVEs. Fixed in 4.17.11-tuxcare.1...

CLSA-2026-1784164029 TuxCare security update for io.netty (1 CVE)

TuxCare rebuilt 46 io.netty packages to address 1 CVE. Fixed in 4.1.75.Final-tuxcare.2...

CLSA-2026-1777509609 TuxCare security update for spatie/browsershot (5 CVEs)

TuxCare rebuilt spatie/browsershot to address 5 CVEs. Fixed in 4.4.0-p2+tuxcare...

CLSA-2026-1776213248 TuxCare security update for io.netty (6 CVEs)

TuxCare rebuilt 46 io.netty packages to address 6 CVEs. Fixed in 4.1.82.Final-tuxcare.1...

CLSA-2026-1776213240 TuxCare security update for io.netty (9 CVEs)

TuxCare rebuilt 40 io.netty packages to address 9 CVEs. Fixed in 4.1.49.Final-tuxcare.1...

CLSA-2026-1773965925 TuxCare security update for jsonpointer (5 CVEs)

TuxCare rebuilt jsonpointer to address 5 CVEs. Fixed in 4.1.0-tuxcare.2...

CLSA-2026-1773274564 TuxCare security update for tunnel-agent (2 CVEs)

TuxCare rebuilt tunnel-agent to address 2 CVEs. Fixed in 0.4.3-tuxcare.1...

CVE-2026-62959

Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a plaintext-TCP listener, an unauthenticated remote client can send a single ordinary HTTP GET request and receive a 301 response whose Location...

Anthropic’s Opus 5 Is Better at Resisting Prompt Injection

The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 5.9% at k=15 and Mythos 5 2.6%, making it the most robust model...