CVE-2026-46601 vulnerabilities

Vulnerabilities for packages: mailpit, gitea, mattermost, pdfcpu, ollama...

ROOT-OS-DEBIAN-13-CVE-2026-31409 CVE-2026-31409 in rootio-linux - Patched by Root

Root has patched CVE-2026-31409 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-45997 CVE-2026-45997 in rootio-linux - Patched by Root

Root has patched CVE-2026-45997 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-50741

creationtimestamp| type| source ---|---|--- 2026-06-26 02:22:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5v53loia2n...

CVE-2026-7531

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

CVE-2026-48995

creationtimestamp| type| source ---|---|--- 2026-06-25 18:03:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zb2p3uk2s 2026-06-26 22:35:40+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-hg3w-7f8c-63hp...

CVE-2026-56053

creationtimestamp| type| source ---|---|--- 2026-06-25 15:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4pv42j7s2j...

CVE-2026-8905

creationtimestamp| type| source ---|---|--- 2026-06-25 13:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp4j7rl6ly2p...

CVE-2026-12245

creationtimestamp| type| source ---|---|--- 2026-06-25 07:55:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3xbltijl2w...

CVE-2026-45188

creationtimestamp| type| source ---|---|--- 2026-06-25 04:57:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3neyzior2i...

CVE-2026-54226

creationtimestamp| type| source ---|---|--- 2026-06-25 04:37:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3mb47lnx25...

GitLab 17.9 < 18.11.6 / 19.0 < 19.0.3 / 19.1 < 19.1.1 (CVE-2026-0934)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticate...

CVE-2026-57280

creationtimestamp| type| source ---|---|--- 2026-06-24 21:44:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2v5sgr2r27...

CVE-2026-4297

creationtimestamp| type| source ---|---|--- 2026-06-24 21:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp2tl5xum72l...

CVE-2026-56130

creationtimestamp| type| source ---|---|--- 2026-06-24 18:58:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp2lukil662t 2026-06-25 10:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4bf7ic4j2j...

CVE-2026-53122

creationtimestamp| type| source ---|---|--- 2026-06-24 18:50:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2lhhhkqw2z...

CVE-2026-53120

creationtimestamp| type| source ---|---|--- 2026-06-24 18:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2jgtpcv72o...

CVE-2026-35025

creationtimestamp| type| source ---|---|--- 2026-06-24 17:20:46+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp2ggd7tze2e 2026-06-24 17:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2i33pblo2p 2026-06-24 19:39:40+00:00| seen|...

DEBIAN-CVE-2026-53004

In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctpgetsockoptpeerauthchunks sctpgetsockoptpeerauthchunks checks that the caller's optval buffer is large enough for the peer AUTH chunk list with if len gauthchunks, which lives at offset...

UBUNTU-CVE-2026-52945

In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c which is commit db9ae3b6b43c79b1ba87eea849fd65efa05b4b2e upstream. We have had three independent production user report...