Astra Linux – Vulnerability in libzstd

Starting from v1.4.1 and before v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and immediately restricted those permissions afterward. As a result, the output files could temporarily be readable or writable by...

CVE-2026-76607

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik 4.7.2...

CVE-2026-59292

CVE-2026-59292...

GO-2026-6188 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-53456

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in customcomponents/blueprintstudio/backend/terminalmanager.py wrote SSH private-key material to a file under the Home Assistant configuration...

GO-2026-6190 Unsafe file permission restoration from metadata in github.com/rclone/rclone

Unsafe file permission restoration from metadata in github.com/rclone/rclone...

CVE-2026-59781

When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could...

GHSA-MPC3-HQR8-W5F3 vulnerabilities

Vulnerabilities for packages: gnupg...

GHSA-H4MF-4V27-HGGJ vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-49980 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-4964 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-45PQ-889G-FCGH vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-4VR5-P2GC-H23P vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-5596 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2025-3842 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2026-5558 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2026-4896 vulnerabilities

Vulnerabilities for packages: minio...

GO-2026-5008 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2025-46327 affecting package telegraf for versions less than 1.31.0-27

CVE-2025-46327 affecting package telegraf for versions less than 1.31.0-27. A patched version of the package is available...

CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: open-webui...