CVE-2026-85228

A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...

CLSA-2026-1790872344 TuxCare security update for drupal/core (2 CVEs)

TuxCare rebuilt drupal/core to address 2 CVEs. Fixed in 10.5.12-p1+tuxcare...

CLSA-2026-1790872226 TuxCare security update for zendframework/zendframework (1 CVE)

TuxCare rebuilt zendframework/zendframework to address 1 CVE. Fixed in 2.4.13-p2+tuxcare...

CLSA-2026-1790870726 TuxCare security update for deepmerge-ts (1 CVE)

TuxCare rebuilt deepmerge-ts to address 1 CVE. Fixed in 7.1.5-tuxcare.1...

CLSA-2026-1790870256 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.14-tuxcare.2...

CLSA-2026-1790870000 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.3-tuxcare.3...

CLSA-2026-1790869902 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.4...

CLSA-2026-1790869753 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 2.4.0-tuxcare.4...

CLSA-2026-1790869488 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.15-tuxcare.2...

CLSA-2026-1790869390 TuxCare security update for @react-native-community (1 CVE)

TuxCare rebuilt 8 @react-native-community packages to address 1 CVE. Fixed in 5.0.1-tuxcare.1...

CLSA-2026-1790868478 TuxCare security update for league/flysystem (1 CVE)

TuxCare rebuilt league/flysystem to address 1 CVE. Fixed in 3.33.0-p1+tuxcare...

CLSA-2026-1790868332 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.6...

CLSA-2026-1790868324 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.10-tuxcare.2...

ai.codriverlabs:scaleout-build-control-plane-api (0.0.1-centraltest), ai.codriverlabs:scaleout-build-ecs (0.0.1-centraltest) +12650 more potentially affected by CVE-2026-89425 via com.fasterxml.jackson.core:jackson-core (>=2.22.0, <=2.22.2)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.9.8 and more Source cves: CVE-2026-89425 Source advisory: GHSA-7HHH-6RMP-J9QF...

ac.pao:reports-web (1.0.0), ai.aarvion:aarvion-spring-boot-starter (0.1.0) +36853 more potentially affected by CVE-2026-89425 via com.fasterxml.jackson.core:jackson-core (>=2.19.0, <=2.21.6)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.19.0, =1.0.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.6 and more Source cves: CVE-2026-8942...

ac.pao:reports-java-engine (1.0.0), ae.alphapay:alphapay-gateway-client (2.0.0) +39534 more potentially affected by CVE-2026-89407 via com.fasterxml.jackson.core:jackson-core (>=2.17.0, <=2.18.10)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.17.0, =1.0.0, =1.0.0, =0.1.1, =0.1.0-rc4, =0.1.0-rc4, =0.1.3, =0.21.0-alpha.1, =0.23.1 and more Source cves: CVE-2026-89407 Source advisory: GHSA-P6PP-M3F8-5C89...

ai.codriverlabs:scaleout-build-control-plane-api (0.0.1-centraltest), ai.codriverlabs:scaleout-build-ecs (0.0.1-centraltest) +12650 more potentially affected by CVE-2026-89407 via com.fasterxml.jackson.core:jackson-core (>=2.22.0, <=2.22.2)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.9.8 and more Source cves: CVE-2026-89407 Source advisory: GHSA-P6PP-M3F8-5C89...

ai.codriverlabs:scaleout-build-control-plane-api (0.0.1-centraltest), ai.codriverlabs:scaleout-build-ecs (0.0.1-centraltest) +12650 more potentially affected by CVE-2026-89407 via com.fasterxml.jackson.core:jackson-core (>=2.22.0, <=2.22.2)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.22.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.7.0, =0.9.3, =0.9.9, =0.7.0, =0.7.0, =0.9.8 and more Source cves: CVE-2026-89407 Source advisory: OSV:GHSA-P6PP-M3F8-5C89...

ac.pao:reports-web (1.0.0), ai.aarvion:aarvion-spring-boot-starter (0.1.0) +36853 more potentially affected by CVE-2026-89407 via com.fasterxml.jackson.core:jackson-core (>=2.19.0, <=2.21.6)

com.fasterxml.jackson.core:jackson-core MAVEN version =2.19.0, =1.0.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.6 and more Source cves: CVE-2026-8940...

@agent-harness-experimental/workflow (>=0.0.1, <=0.0.5), @ai_kit/workflow-world (>=0.1.0, <=0.2.0) +144 more potentially affected by unknown CVE via devalue (>=5.0.0, <=5.9.2)

devalue NPM version =5.0.0, =0.0.1, =0.1.0, =6.1.0, =6.1.0, =7.0.0, =6.1.0, =0.3.0, =0.0.0-dev.20251108074143, =4.2.3, =3.8.8, =3.8.8, =3.8.7, =3.8.7, =0.1.1, =4.3.15, =4.3.33 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HX4R-W6WJ-J8FG...