CLSA-2026-1792308469 TuxCare security update for @babel/helper-get-function-arity (2 CVEs)

TuxCare rebuilt @babel/helper-get-function-arity to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792308467 TuxCare security update for @babel/helper-get-function-arity (1 CVE)

TuxCare rebuilt @babel/helper-get-function-arity to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792308466 TuxCare security update for @babel/helper-get-function-arity (1 CVE)

TuxCare rebuilt @babel/helper-get-function-arity to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-128037

TuxCare rebuilt @babel/helper-get-function-arity to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-128036

TuxCare rebuilt @babel/helper-get-function-arity to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-128038

TuxCare rebuilt @babel/helper-get-function-arity to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling getfunction0 getfunction0 calls pcigetdomainbusandslot; as noted in the comment, it returns a pci device whose refcount is incremented. Therefore, after using such a device, pcidevp...

CVE-2026-104609

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the file editaccounts.php. This manipulation of the argument userid/patientid/physicianid/discountsid/servicesid causes sql injection. Remote...

ZenLib BitStream_LE Heap Buffer Overflow DoS

The vulnerability of the ZenLib::BitStreamLE::Get function in the ZenLib/Source/ZenLib/BitStreamLE.h header file of the MediaInfo reading library is related to dependencies that are undefined for each implementation type. Exploiting this vulnerability could allow an attacker to cause a service...

ZenLib BitStream_LE Get Function

The vulnerability of the ZenLib::BitStreamLE::Get function in the ZenLib/Source/ZenLib/BitStreamLE.h header file of the MediaInfo reading library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

PT-2026-60972

Name of the Vulnerable Software and Affected Versions zevorn rt-claw versions prior to 0.2.1 Description A server-side request forgery SSRF issue exists in the http request component. Remote exploitation is possible through the manipulation of the url argument within the claw net get and claw net...

PYSEC-2026-3001 PyMuPDF has a path traversal in _main_.py

A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...

PyMuPDF has a path traversal in _main_.py

A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...

PT-2026-59623

A path traversal and arbitrary file write vulnerability exist in the embedded get function in ' main .py' in PyMuPDF version, 1.26.5...

EUVD-2025-210414

picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch.dynamo.guards.GuardBuilder.get function in reduce methods. Attackers can craft pickle files with embedded code that evades picklescan detection and executes arbitrary commands when loaded...

CVE-2026-10177 Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery

A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file apidocs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-44111 OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get

OpenClaw before 2026.4.15 contains an arbitrary file read vulnerability in the QMD backend memoryget function that allows callers to read any Markdown files within the workspace root. Attackers with access to the memory tool can bypass path restrictions by providing arbitrary workspace Markdown...

PT-2026-38244

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.15 Description An arbitrary file read issue exists in the QMD backend memory get function. Attackers with access to the memory tool can bypass path restrictions by providing arbitrary workspace Markdown paths,...

CVE-2026-7596

A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the function data.get of the file .claude/skills/design-system/scripts/generate-slide.py of the component Slide Generator. Such manipulation leads to cross site scripting. The attack may ...

CVE-2026-7596 nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting

A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the function data.get of the file .claude/skills/design-system/scripts/generate-slide.py of the component Slide Generator. Such manipulation leads to cross site scripting. The attack may ...