[SECURITY] Fedora 45 Update: ocaml-base-0.17.3-10.fc45

Base is a standard library for OCaml. It provides a standard set of general purpose modules that are well-tested, performant, and fully-portable across any environment that can run OCaml code. Unlike other standard library projects, Base is meant to be used as a wholesale replacement of the...

[SECURITY] Fedora 45 Update: libnbd-1.25.7-4.fc45

NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...

aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +133 more potentially affected by CVE-2026-105752 via vllm (>=0.1.3, <=0.29.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.2, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.5.1 and more Source cves: CVE-2026-105752 Source advisory: SNYK:PYTHON-VLLM-20574182...

UBUNTU-CVE-2026-104259

GHSA-qrch-pjfr-9g47: t:removeComments mishandles the character after a comment terminator, bypassing rules...

Stack-based Buffer Overflow in Certificate Parsing Service of Brocade Fabric OS

: A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

Linux Distros Unpatched Vulnerability : CVE-2026-104712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal...

UBUNTU-CVE-2026-104269

GHSA-5pww-8rfg-9crf: RFC 2231 filename parameter bypasses multipart filename rules...

The vulnerability of the JSON processing library and stream-json, related to inadequate control over changes to prototype attributes, allows attackers to execute a “prototype pollution” attack.

The vulnerability of the JSON processing library and stream-json is related to inadequate control over changes to prototype attributes. Exploiting this vulnerability could allow an attacker to execute a “prototype pollution” attack...

CVE-2026-106123: Replicating Malicious Code (Virus or Worm)

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load includes the raw uri value in wrapped exceptions when AMQP URI parsing fails. Because the URI may contain a plaintext usernam...

CVE-2026-106121: Loop with Unreachable Exit Condition

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read fails to terminate when input ends inside a quoted string or a line comment because its string and whitespace scanners d...

PT-2026-106844

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.35.0 Description The ConnectionFactoryConfigurator.load function includes the raw URI value in wrapped exceptions when AMQP URI parsing fails. Since the URI can contain plaintext usernames and...

OPENSUSE-SU-2026:12064-1 ffmpeg-4-4.4.8-6.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.8-6.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-43598: Untrusted Pointer Dereference

Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...

PT-2026-106842

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.37.0 Description A denial of service issue exists in the com.rabbitmq.tools.json.JSONReader.read function. The problem occurs when input ends inside a quoted string or a line comment, as the...

puppetboard (0.2.2), talisker (>=0.4.0, <=0.4.1) potentially affected by CVE-2026-102598 via werkzeug (0.11.5)

werkzeug PYPI version 0.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - puppetboard 0.2.2 - talisker =0.4.0, =0.4.1 Source cves: CVE-2026-102598 Source advisory: OSV:GHSA-G6X2-HCCM-HH4M...

a2grunnerp (>=0.1.0, <=0.1.8), agentuniverse (>=0.0.6.dev1, <=0.0.7) +142 more potentially affected by CVE-2026-102598 via werkzeug (2.2.2)

werkzeug PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - a2grunnerp =0.1.0, =0.0.6.dev1, =0.3.0rc5, =0.10.0, =2022.8.1, =0.1.0, =7.0.1, =0.0.2, =1.0.0, =1.0.2 - dareyou 1.0.0 and more Source cves:...

amoniak (1.0.2), aws-scripts (>=0.0.20, <=0.1.12) +6 more potentially affected by CVE-2026-96749 via pymongo (2.9.5)

pymongo PYPI version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - amoniak 1.0.2 - aws-scripts =0.0.20, =0.4.2, =2.0.3, =0.1.3, =2.0.0, =2.3.0 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...

bolinette (>=0.6.11, <=0.7.6), cvexplore (>=0.1.3, <=0.1.6) +14 more potentially affected by CVE-2026-96749 via pymongo (3.11.2)

pymongo PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bolinette =0.6.11, =0.1.3, =0.0.1, =0.0.3, =1.1.0b1, =1.0.2, =1.1.2, =0.0.2, =0.0.6 - scrapy-plus 1.0.5 and more Source cves: CVE-2026-96749 Sour...

2d6io-cryptobot (0.0.1), almanac-bot (>=0.3.1, <=0.3.2) +19 more potentially affected by CVE-2026-96749 via pymongo (3.5.1)

pymongo PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - 2d6io-cryptobot 0.0.1 - almanac-bot =0.3.1, =0.1.5, =0.1.2a0, =1.1.0, =0.4.11, =1.3.9, =0.43.0, =1.0.0, =1.0.4, =13.0.0, =11.1.0, =0.1.0, =1.0.1,...

quokka (>=0.0.1.dev84, <=0.4.1.dev22) potentially affected by CVE-2026-96749 via pymongo (2.4.1)

pymongo PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...