BELL-CVE-2026-53118

Bulletin has no description...

BELL-CVE-2026-53085

Bulletin has no description...

BELL-CVE-2026-53048

Bulletin has no description...

BELL-CVE-2026-53061

Bulletin has no description...

BELL-CVE-2026-53056

Bulletin has no description...

BELL-CVE-2026-53047

Bulletin has no description...

BELL-CVE-2026-53033

Bulletin has no description...

BELL-CVE-2026-53035

Bulletin has no description...

BELL-CVE-2026-52972

Bulletin has no description...

BELL-CVE-2026-52970

Bulletin has no description...

BELL-CVE-2026-52980

Bulletin has no description...

UBUNTU-CVE-2026-48618

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...

UBUNTU-CVE-2026-48619

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

GO-2026-5445 HashiCorp Nomad vulnerable to a path traversal in github.com/hashicorp/nomad

HashiCorp Nomad vulnerable to a path traversal in github.com/hashicorp/nomad...

CVE-2026-6325 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer...

GO-2026-5169 Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint in github.com/coder/coder

Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint in github.com/coder/coder...

GO-2026-5076 HashiCorp Nomad vulnerable to symlink attack in github.com/hashicorp/nomad

HashiCorp Nomad vulnerable to symlink attack in github.com/hashicorp/nomad...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the realIP function. An attacker can gain unauthorized access to restricted resources, evade rate limiting, or manipulate security logs by supplying a crafted X-Forwarded-For header...

UBUNTU-CVE-2026-55967

AES-GCM encryption/decryption with extremely large cumulative single message sizes 64 GiB were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery...

UBUNTU-CVE-2026-49839

jq is a command-line JSON processor. Prior to 1.8.2, jq --rawfile can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assertion-disabled builds. When jvloadfileraw=1 reads an attacker-controlled file, it repeatedly appends file chunks to the...