AZL-107679 CVE-2026-78663 affecting package kured 1.15.0-6

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107342 CVE-2026-78660 affecting package docker-cli 25.0.7-5

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107054 CVE-2026-78660 affecting package cri-o 1.30.1-1

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

UBUNTU-CVE-2026-94439

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...

UBUNTU-CVE-2026-97030

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

UBUNTU-CVE-2026-97031

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector a...

UBUNTU-CVE-2026-56857

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...

UBUNTU-CVE-2026-94440

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes...

UBUNTU-CVE-2026-78667

When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU...

CLSA-2026-1791475845 Fix CVE(s): CVE-2026-87766

SECURITY UPDATE: symlink traversal during sandbox setup lets a crafted source tree redirect file/dir creation and mounts outside the sandbox sandbox escape - debian/patches/CVE-2026-87766.patch: resolve every destination inside /newroot and every source inside /oldroot a component at a time...

GO-2026-6604 Root.Mkdir(All) can follow junctions out of the root on Windows in os

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...

aas2openapi (>=0.2.0, <=0.2.4), adelecv (>=0.0.1, <=0.0.2) +115 more potentially affected by CVE-2026-107728 via strawberry-graphql (>=0.16.10, <=0.325.0)

strawberry-graphql PYPI version =0.16.10, =0.2.0, =0.0.1, =0.0.1, =2025.4.0, =2025.4.0, =0.1.1, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2rc0, =1.0.0, =0.9.0, =5.1.0 and more Source cves: CVE-2026-107728 Source advisory: MEND:CVE-2026-107728...

CLSA-2026-1791497467 gnutls: Fix of CVE-2026-42011

CVE-2026-42011: a CA carrying only excluded name constraints, or permitted ones of another name type, no longer causes the permitted name constraints of a CA below it to be dropped during chain verification. This corrects the els1 entry: 3.3.29 is affected through the APPEND path of...

airo-camera-toolkit (>=2025.4.0, <=2025.7.1), airo-dataset-tools (>=2025.4.0, <=2026.5.0) +36 more potentially affected by CVE-2026-107727 via strawberry-graphql (>=0.312.4, <=0.327.1)

strawberry-graphql PYPI version =0.312.4, =2025.4.0, =2025.4.0, =1.0.0, =0.9.0, =26.4.0rc1, =0.1.0a1, =0.2.0, =1.0.1, =0.1.0, =1.17.0, =0.1.0, =0.0.246, =2.0.0, =0.0.1a0, =0.1.26, =0.1.32 and more Source cves: CVE-2026-107727 Source advisory: MEND:CVE-2026-107727...

@jsprismarine/auth (>=0.14.1, <=0.15.0-unstable-20261024103131), @jsprismarine/client (>=0.12.2-unstable-20250320195345, <=0.15.0-unstable-20261024103131) +2 more potentially affected by CVE-2026-107719 via fast-jwt (>=6.0.0, <=6.3.3)

fast-jwt NPM version =6.0.0, =0.14.1, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.12.2-unstable-20250320195345, =0.14.2 Source cves: CVE-2026-107719 Source advisory: OSV:GHSA-X937-HJ6V-793P...

com.erudika:para-cache-hazelcast (1.31.0), com.github.raghav-chandra:tools-mbq (>=0.0.1, <=0.5.0) +83 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.10.5)

com.hazelcast:hazelcast MAVEN version 3.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.erudika:para-cache-hazelcast 1.31.0 - com.github.raghav-chandra:tools-mbq =0.0.1, =1.0.7, =0.7, =0.7, =0.7.1...

ch.mobi.mobitor:mobitor-base (>=3.1.185, <=3.1.237), com.corundumstudio.socketio:netty-socketio (1.7.19) +34 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.12.7)

com.hazelcast:hazelcast MAVEN version 3.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.185, =2.5, =0.4.4, =1.0.5.release, =2.2.3, =4.10.1, =3.3.0, =3.3.7, =3.3.7,...

com.hazelcast:hazelcast-all (1.9.4), com.hazelcast:hazelcast-client (1.9.4) +18 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.9.4)

com.hazelcast:hazelcast MAVEN version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4 - com.hazelcast:hazelcast-client 1.9.4 - com.hazelcast:hazelcast-cloud 1.9.4 -...

com.hazelcast:hazelcast-all (1.8.4), com.hazelcast:hazelcast-client (1.8.4) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (1.8.4)

com.hazelcast:hazelcast MAVEN version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.8.4 - com.hazelcast:hazelcast-client 1.8.4 - com.hazelcast:hazelcast-hibernate 1.8....

com.hazelcast:hazelcast-build-utils (3.6-ea), com.hazelcast:hazelcast-client (3.6-ea) +11 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.6-ea)

com.hazelcast:hazelcast MAVEN version 3.6-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.6-ea - com.hazelcast:hazelcast-client 3.6-ea -...