EUVD-2026-82560

PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfColorSpaceFilterIndexed::FetchScanLine in src/podofo/main/PdfColorSpaceFilter.cpp. PODOFOINVARIANT does not perform a...

CVE-2026-54633 PoDoFo: Heap Out-of-Bounds Read in Indexed Color Space Image Decoding (FetchScanLine)

PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfColorSpaceFilterIndexed::FetchScanLine in src/podofo/main/PdfColorSpaceFilter.cpp. PODOFOINVARIANT does not perform a...

CVE-2026-84939

A flaw was found in Apache FreeMarker. A remote attacker could exploit a path traversal vulnerability in the template loading mechanism by providing a specially crafted, malformed locale identifier. This is possible if the localized lookup configuration setting is enabled, which is the default...

CVE-2026-54716

creationtimestamp| type| source ---|---|--- 2026-09-17 21:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkg2c2ri2v 2026-09-17 21:02:49+00:00| seen| https://bsky.app/profile/potato.software/post/3mvqkhn6knz2c...

CVE-2026-54627

creationtimestamp| type| source ---|---|--- 2026-09-17 21:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkeikbtr2w 2026-09-17 22:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvqo42eegg25 2026-09-18 01:00:04+00:00| seen|...

CVE-2026-92943

creationtimestamp| type| source ---|---|--- 2026-09-17 21:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkeb2iga2v 2026-09-17 22:08:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvqo4knln62b 2026-09-18 00:50:04+00:00| seen|...

CVE-2026-68536

creationtimestamp| type| source ---|---|--- 2026-09-17 20:40:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvqj755n7y24...

CVE-2026-76187

creationtimestamp| type| source ---|---|--- 2026-09-17 20:40:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvqj73vbiq2t...

CVE-2026-75523

creationtimestamp| type| source ---|---|--- 2026-09-17 20:31:26+00:00| seen| https://gist.github.com/alon710/5b0e181a2056c4129c0abf0e0a3f21b2...

EUVD-2026-81098

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs...

GHSA-8WMF-6V46-5GFG OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Summary OpenTelemetry Go versions 1.5.0 through 1.44.0 can include trace exporter endpoint configuration in an internal diagnostic log emitted when an SDK TracerProvider is created. The default OpenTelemetry logger does not emit this event. Exposure requires an application to install a logger tha...

CVE-2026-86049 Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyterserver/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the...

GHSA-3JHR-MXMX-38CX Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashed_password and 2FA secrets via offsetGet()

Summary system/config/security.yaml's Twig sandbox policy allow-lists offsetget and offsetexists for Grav\Common\User\Interfaces\UserInterface. The concrete Grav\Common\User\DataUser\User class does not filter which fields offsetGet returns, so any sandboxed template with access to a User object...

CVE-2026-86462

creationtimestamp| type| source ---|---|--- 2026-09-17 20:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvqi3bzzum2t...

EUVD-2026-82417

Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter through Apache SolrJ from search endpoints such as /d1/mn/v2/query/solr/ to its privileged Solr backend. An...

CVE-2026-50022 Metacat acts as unintended proxy to backend Apache SOLR engine

Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter through Apache SolrJ from search endpoints such as /d1/mn/v2/query/solr/ to its privileged Solr backend. An...

Important: Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image

A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, an...

Security Bulletin: Vulnerability in Spring Framework affects DB2 Dev Extension (CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846)

Summary Upgraded spring-webmvc to 6.2.19 to remediate CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, and CVE-2026-41846 Information Disclosure, DoS, Path Traversal, Open Redirect, XSS — highest CVSS Base Score 7.5 High — PVR0786341. Vulnerability Details CVEID:CVE-2026-41841...

CVE-2026-93296

creationtimestamp| type| source ---|---|--- 2026-09-17 19:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/co4remv34wfxg...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: caddy: caddy-2.11.4-0.4.hum1 aarch64, x8664 caddy-2.11.4-0.4.hum1.src src Security Fixes: caddy: CVE-2026-81871...