CVE-2026-32700 Devise has a confirmable "change email" race condition that permits user to confirm email they have no access to

Devise is an authentication solution for Rails based on Warden. Prior to version 5.0.3, a race condition in Devise's Confirmable module allows an attacker to confirm an email address they do not own. This affects any Devise application using the reconfirmable option the default when using...

GHSA-RF74-V2FM-23PW Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS

Summary JSONTaggedDecoder.decodeobj in nltk/jsontags.py calls itself recursively without any depth limit. A deeply nested JSON structure exceeding sys.getrecursionlimit default: 1000 will raise an unhandled RecursionError, crashing the Python process. Affected code File: nltk/jsontags.py, lines...

CVE-2026-31967 HTSlib CRAM reader has out-of-bounds read due to improper validation of input

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the cramdecodeslice function called while reading CRAM records, the value of the mate reference id field was not validated. Later use of this value, fo...

EUVD-2026-12913

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow actct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier 1: "Since the blamed commit below, classify can return TCACTCONSUMED while the current skb being held by the defragmentation...

DEBIAN-CVE-2026-23264

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 "drm/amd: Refactor amdgpuaspm to be...

DEBIAN-CVE-2026-23265

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer in read,writeendio ----------- cut here ------------ kernel BUG at fs/f2fs/data.c:358! Call Trace: blkupdaterequest+0x5eb/0xe70 block/blk-mq.c:987 blkmqendrequest+0x3e/0x70...

DEBIAN-CVE-2026-23258

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setupnicdevices, the netdev is allocated using allocetherdevmq. However, the pointer to this structure is stored in oct-propsi.netdev only after the calls to...

UBUNTU-CVE-2026-23270

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow actct to bind to clsact/ingress qdiscs and shared blocks As Paolo said earlier 1: "Since the blamed commit below, classify can return TCACTCONSUMED while the current skb being held by the defragmentation...

CVE-2026-23267

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix ISCHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes During SPO tests, when mounting F2FS, an -EINVAL error was returned from f2fsrecoverinodepage. The issue occurred under th...

CVE-2026-23253 media: dvb-core: fix wrong reinitialization of ringbuffer on reopen

In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ringbuffer on reopen dvbdvropen calls dvbringbufferinit when a new reader opens the DVR device. dvbringbufferinit calls initwaitqueuehead, which reinitializes the waitqueue list head...

CVE-2026-27459

A flaw was found in pyOpenSSL. The setcookiegeneratecallback callback function can be used to generate DTLS cookies. When the callback returns a cookie string or byte sequence longer than 256 bytes, a buffer overflow can be triggered due to a missing bounds checking before copying the data to a...

CVE-2026-2991 KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token

The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2. This is due to the patientSocialLogin function not verifying the social provider access token before authenticating a user. This makes it...

Malicious code in sky-enablement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9712856e1dd6e76d395507a76c21d01a945d4e5490e0d747384212a4a8b7c6df The package sky-enablement was found to contain malicious code...

MAL-2026-1809 Malicious code in ph-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a12a2296142889c91ff5760f4a0abc8866ea9a5e439847b8b5817565348b6e The package ph-common was found to contain malicious code...

Malicious code in netlify-claude-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5139f35306556d4571bbe595a55c782a1635c7f3542cef6e7ce402bbe014b5e3 The package netlify-claude-ai was found to contain malicious code...

Malicious code in chromecast-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ded3cbd70f99d1eeed4d998a82b13da94a22539d5783a36ad7c2651a01ca724 The package chromecast-receiver was found to contain malicious code...

Malicious code in chai-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b0056e3a13b9c7f97a77ee8351068a9d1a900c5cabd5f42011b31cedf0fd13 The package chai-types was found to contain malicious code...

Malicious code in blob-internal-security-test-f63eabf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74309111e07d1757fef6d6a253d000339f2215e3166990d4e64964d4ec3d803 The package blob-internal-security-test-f63eabf7 was found to contain malicious code...

MAL-2026-1610 Malicious code in @emerald-react/icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a73cc0869fbd6a9f90687210caf69cb8e9ee872202bc342c24c07ead3399b0 The package @emerald-react/icon was found to contain malicious code...

Malicious code in @emerald-react/button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a53b07341310aa38bec5a12c64977afb8a97b940baf599f6e8d632417b9997e The package @emerald-react/button was found to contain malicious code...