ROOT-APP-NPM-CVE-2025-13204 CVE-2025-13204 in expr-eval - Patched by Root

Root has patched CVE-2025-13204 in the expr-eval package for Root:npm. Multiple fixed versions available...

CLSA-2026-1791186983 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 7 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.10...

CVE-2026-105250 vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero

A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...

ROOT-APP-MAVEN-CVE-2022-23307 CVE-2022-23307 in log4j:log4j - Patched by Root

Root has patched CVE-2022-23307 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-26464 CVE-2023-26464 in log4j:log4j - Patched by Root

Root has patched CVE-2023-26464 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2021-4104 CVE-2021-4104 in log4j:log4j - Patched by Root

Root has patched CVE-2021-4104 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-88044 CVE-2026-88044 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-88044 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-54572 CVE-2026-54572 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-54572 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-59733 CVE-2026-59733 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-59733 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-88018 CVE-2026-88018 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-88018 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-71312 CVE-2026-71312 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-71312 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-71309 CVE-2026-71309 in github.com/rclone/rclone - Patched by Root

Root has patched CVE-2026-71309 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...

CVE-2026-105292 Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth Callback

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlled userInfo from a web page, signing th...

UBUNTU-CVE-2026-66020

virtio-gpu: disable blob scanouts on mapping cleanup...

OPENSUSE-SU-2026:12056-1 distribution-registry-3.1.2-1.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-104712: Asymmetric Resource Consumption (Amplification)

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

CVE-2026-105642: Improper Control of Generation of Code

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

PT-2026-106138

Name of the Vulnerable Software and Affected Versions Ghost versions 6.56.0 through 6.66.0 Description A vulnerability exists in the SVG handling of an image processing library bundled with the Ghost content management system. A staff user with Contributor permissions or higher can create a...

PT-2026-106134

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.5.14 through 2.5.33 Apache Struts versions 6.0.0 through 6.11.0 Apache Struts versions 7.0.0 through 7.3.0 Description An asymmetric resource consumption amplification issue exists when a request parameter is bound to ...

OPENSUSE-SU-2026:12061-1 nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed...