DEBIAN-CVE-2026-53505

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...

DEBIAN-CVE-2026-53502

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...

BELL-CVE-2026-64558

Bulletin has no description...

BELL-CVE-2026-56850

Bulletin has no description...

UBUNTU-CVE-2026-53587

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

UBUNTU-CVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

UBUNTU-CVE-2026-7260

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

CLEANSTART-2026-QV45802 Security fixes in velero-plugin-for-csi 0.7.1-r1

Package velero-plugin-for-csi version 0.7.1-r1 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-KX00546 Security fixes in harbor-registry-fips 2.8.3-r0

Package harbor-registry-fips version 2.8.3-r0 fixes 1 vulnerabilities: CVE-2025-29923...

CLEANSTART-2026-FY03809 Security fixes in expat 2.6.2-r0

Package expat version 2.6.2-r0 fixes 1 vulnerabilities: CVE-2024-28757...

CLEANSTART-2026-CT11931 Security fixes in prometheus-mysqld-exporter 0.18.0-r3

Package prometheus-mysqld-exporter version 0.18.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-GF33583 Security fixes in kustomize-fips 5.7.1-r1

Package kustomize-fips version 5.7.1-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-WZ41154 Security fixes in minio-operator 7.0.1-r3

Package minio-operator version 7.0.1-r3 fixes 1 vulnerabilities: CVE-2025-30204...

CLEANSTART-2026-CQ67878 Security fixes in prometheus-mysqld-exporter 0.17.2-r2

Package prometheus-mysqld-exporter version 0.17.2-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-KI68145 Security fixes in cloudnative-pg 1.26.3-r1

Package cloudnative-pg version 1.26.3-r1 fixes 10 vulnerabilities: ghsa-xgrm-4fwx-7qm8, ghsa-9jj7-4m8r-rfcm, CVE-2026-33815, CVE-2026-33816, ghsa-j88v-2chj-qfwx...

CLEANSTART-2026-SU97582 Security fixes in busybox 1.36.1-r25

Package busybox version 1.36.1-r25 fixes 1 vulnerabilities: CVE-2023-42366...

CLEANSTART-2026-RR14804 Security fixes in miniforge3 26.1.1.0-r4

Package miniforge3 version 26.1.1.0-r4 fixes 1 vulnerabilities: CVE-2026-59890...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2026-46681

A flaw was found in the @nevware21/ts-utils library. This vulnerability allows a remote attacker to manipulate the fundamental properties of objects within an application. By exploiting this, an attacker could potentially execute unauthorized code, leading to a complete compromise of the...