363318 matches found
UBUNTU-CVE-2026-73856
GHSA-vmg8-j66p-vgvw: Response body inspection bypass via non-canonical Content-Type casing...
OPENSUSE-SU-2026:11953-1 aliyun-cli-3.5.1-2.1 on GA media
These are all security issues fixed in the aliyun-cli-3.5.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11964-1 helm3-3.22.0-3.1 on GA media
These are all security issues fixed in the helm3-3.22.0-3.1 package on the GA media of openSUSE Tumbleweed...
UBUNTU-CVE-2026-61813
GHSA-2vqc-36qp-ccmw: Weak libcurl TLS hostname verification setting when fetching over HTTPS...
OPENSUSE-SU-2026:11978-1 yast2-users-5.0.9-1.1 on GA media
These are all security issues fixed in the yast2-users-5.0.9-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11972-1 python313-jwcrypto-1.6.1-1.1 on GA media
These are all security issues fixed in the python313-jwcrypto-1.6.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-104289
Name of the Vulnerable Software and Affected Versions Apache Thrift C++ library versions 0.7.0 through 0.24.0 Apache Thrift D library versions 0.9.0 through 0.24.0 Description Improper validation of certificates with host mismatches occurs in the C++ and D libraries. The default access manager fo...
CVE-2026-66858: Uncontrolled Recursion
The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...
PT-2026-104324
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description The protocol skip routine in several Apache Thrift bindings fails to apply the recursion limit. This allows a message containing deeply nested unknown fields to exhaust the stack, potentially...
UBUNTU-CVE-2026-61812
GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion...
21millionpixels-mcp (>=0.2.0, <=0.2.1), @0xkillaflow/agama-redmine-mcp (>=1.0.0, <=2.1.0) +5179 more potentially affected by unknown CVE via @modelcontextprotocol/sdk (>=1.24.0, <=1.31.0)
@modelcontextprotocol/sdk NPM version =1.24.0, =0.2.0, =1.0.0, =0.1.3, =0.1.0, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.14.0, =0.1.0, =0.2.0, =0.7.0, =1.0.2 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0090...
mako TemplateLookup Function Unauthenticated Access
The vulnerability of the TemplateLookup.gettemplate function in the mako/lookup.py file of the Sqlalchemy mako template library in Python is related to an incorrect path name limitation for accessing restricted directories. Exploiting this vulnerability could allow an attacker to gain unauthorize...
CLSA-2026-1790893546 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.2-tuxcare.3...
CLSA-2026-1790890883 TuxCare security update for ip-address (3 CVEs)
TuxCare rebuilt ip-address to address 3 CVEs. Fixed in 7.1.0-tuxcare.4...
CLSA-2026-1790889495 TuxCare security update for fastify (1 CVE)
TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.2.1-tuxcare.3...
CLSA-2026-1790889438 TuxCare security update for axios (2 CVEs)
TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.33.0-tuxcare.4...
awsidr (>=1.0.0, <=1.0.9), rds-proxy-password-rotation (>=0.5.8, <=0.6.556) potentially affected by CVE-2026-104002 via aws-lambda-powertools (>=3.7.0, <=3.34.0)
aws-lambda-powertools PYPI version =3.7.0, =1.0.0, =0.5.8, =0.6.556 Source cves: CVE-2026-104002 Source advisory: MEND:CVE-2026-104002...
CLSA-2026-1790888307 TuxCare security update for piscina (1 CVE)
TuxCare rebuilt piscina to address 1 CVE. Fixed in 4.8.0-tuxcare.1...