CLEANSTART-2026-SN03087 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs

Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...

CLEANSTART-2026-MN49716 In Eclipse Jetty, versions 12

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions 12...

CLEANSTART-2026-DA06561 In Eclipse Jetty, versions <=9

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions =9...

CLEANSTART-2026-AU34344 In jose4j before 0

Security vulnerability affects the apache-nifi package. In jose4j before 0...

CLEANSTART-2026-IY45098 Security fix for GHSA-hrxh-6v49-42gf applied in: loki 3.6.11-r0

Security vulnerability affects the loki package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XX38333 Prometheus is an open-source monitoring system and time series database

CVE-2026-42154 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-KL35365 Prometheus is an open-source monitoring system and time series database

CVE-2026-42151 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-FB95411 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the cortex package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-TZ27062 Prometheus is an open-source monitoring system and time series database

CVE-2026-44903 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

OPENSUSE-SU-2026:12097-1 MozillaFirefox-157.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-157.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12105-1 xwayland-24.1.13-2.1 on GA media

These are all security issues fixed in the xwayland-24.1.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12099-1 cyrus-sasl-2.1.28-13.1 on GA media

These are all security issues fixed in the cyrus-sasl-2.1.28-13.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12102-1 iscsiuio-0.7.8.8-114.1 on GA media

These are all security issues fixed in the iscsiuio-0.7.8.8-114.1 package on the GA media of openSUSE Tumbleweed...

ca.derekellis.kgtfs:gtfs-db (0.5.2), ca.derekellis.kgtfs:raptor (0.5.2) +447 more potentially affected by CVE-2026-108474 via org.jetbrains.exposed:exposed-core (>=1.1.0, <=1.5.0)

org.jetbrains.exposed:exposed-core MAVEN version =1.1.0, =1.0.0, =1.1.6, =2.3.3, =2.3.6, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =0.1.0, =0.2.0 and more Source cves: CVE-2026-108474 Source advisory: MEND:CVE-2026-108474...

CLSA-2026-1791584881 TuxCare security update for shell-quote (1 CVE)

TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.8.3-tuxcare.2...

AZL-107973 CVE-2026-108267 affecting package gcc 13.2.0-7

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

AZL-107985 CVE-2026-108267 affecting package golang 1.27.1-1

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

ail-typo-squatting

ail-typo-squatting ail-typo-squatting è una libreria Python per generare un elenco di potenziali domini typosquatting con un motore di permutazione dei nomi di dominio, per alimentare AIL e altri sistemi. Lo strumento può essere utilizzato come strumento autonomo o per alimentare altri sistemi. S...

CVE-2026-108267 Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.1.0, <=0.1.2) +6 more potentially affected by CVE-2026-108261 via @tinacms/app (>=0.0.0-a0a8cb3-20260817041004, <=2.5.12)

@tinacms/app NPM version =0.0.0-a0a8cb3-20260817041004, =0.10.0, =0.1.0, =0.1.0, =0.0.0-20220819182845, =0.0.2, =0.0.3, =0.1.1, =0.1.3 - ramidus 1.2.1 Source cves: CVE-2026-108261 Source advisory: MEND:CVE-2026-108261...