CLEANSTART-2026-RF76675 go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP

Security vulnerability affects the dex-fips package. go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP...

[SECURITY] Fedora 45 Update: plplot-5.15.0-117.fc45

PLplot is a library of functions that are useful for making scientific plots. PLplot can be used from within compiled languages such as C, C++, FORTRAN and Java, and interactively from interpreted languages such as Octave, Python, Perl and Tcl. The PLplot library can be used to create standard x-...

[SECURITY] Fedora 45 Update: ocaml-uucp-18.0.0-1.fc45

Uucp is an OCaml library providing efficient access to a selection of character properties of the Unicode character database http://www.unicode.org/reports/tr44/. Uucp is independent from any Unicode text data structure and has no dependencies. It is distributed under the ISC license...

[SECURITY] Fedora 45 Update: ocaml-swhid-core-0.1-13.fc45

swhidcore is an OCaml library to work with persistent identifiers used by Software Heritage, also known as swhid. This is the core library; for most use cases you should use the swhid library instead...

[SECURITY] Fedora 45 Update: ocaml-re-1.14.0-7.fc45

A pure OCaml regular expression library. Supports Perl-style regular expressions, Posix extended regular expressions, Emacs-style regular expressions, and shell-style file globbing. It is also possible to build regular expressions by combining simpler regular expressions. There is also a subset o...

[SECURITY] Fedora 45 Update: ocaml-sexplib-0.17.0-13.fc45

This package contains a library for serializing OCaml values to and from S-expressions...

[SECURITY] Fedora 45 Update: ocaml-parsexp-0.17.0-13.fc45

This library provides generic parsers for parsing S-expressions from strings or other media. The library is focused on performance but still provides full generic parsers that can be used effortlessly with strings, bigstrings, lexing buffers, character streams or any other source. It provides thr...

[SECURITY] Fedora 45 Update: ocaml-opam-0install-cudf-0.5.0-11.fc45

Opam's default solver is designed to maintain a set of packages over time, minimizing disruption when installing new programs and finding a compromise solution across all packages e.g. avoiding upgrading some library to prevent uninstalling another program. In many situations e.g. a CI system...

[SECURITY] Fedora 45 Update: ocaml-mccs-1.1.19-10.fc45

mccs which stands for Multi Criteria CUDF Solver is a CUDF problem solver developed at UNS during the European MANCOOSI project. This project contains a stripped-down version of the mccs solver, taken from snapshot 1.1, with a binding as an OCaml library, and building with dune. The binding enabl...

[SECURITY] Fedora 45 Update: ocaml-camlpdf-2.9-6.fc45

OCaml library for reading, writing and modifying PDFs. The basis of the Cpdf command line tools...

[SECURITY] Fedora 45 Update: ocaml-base-0.17.3-10.fc45

Base is a standard library for OCaml. It provides a standard set of general purpose modules that are well-tested, performant, and fully-portable across any environment that can run OCaml code. Unlike other standard library projects, Base is meant to be used as a wholesale replacement of the...

[SECURITY] Fedora 45 Update: libnbd-1.25.7-4.fc45

NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...

UBUNTU-CVE-2026-104259

GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules...

CVE-2026-106123: Replicating Malicious Code (Virus or Worm)

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load includes the raw uri value in wrapped exceptions when AMQP URI parsing fails. Because the URI may contain a plaintext usernam...

Stack-based Buffer Overflow in Certificate Parsing Service of Brocade Fabric OS

: A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

UBUNTU-CVE-2026-104269

GHSA-5pww-8rfg-9crf: RFC 2231 filename parameter bypasses multipart filename rules...

CVE-2026-106121: Loop with Unreachable Exit Condition

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read fails to terminate when input ends inside a quoted string or a line comment because its string and whitespace scanners d...

PT-2026-106844

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.35.0 Description The ConnectionFactoryConfigurator.load function includes the raw URI value in wrapped exceptions when AMQP URI parsing fails. Since the URI can contain plaintext usernames and...

PT-2026-106842

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.37.0 Description A denial of service issue exists in the com.rabbitmq.tools.json.JSONReader.read function. The problem occurs when input ends inside a quoted string or a line comment, as the...

The vulnerability of the JSON processing library and stream-json, related to inadequate control over changes to prototype attributes, allows attackers to execute a “prototype pollution” attack.

The vulnerability of the JSON processing library and stream-json is related to inadequate control over changes to prototype attributes. Exploiting this vulnerability could allow an attacker to execute a “prototype pollution” attack...