ROOT-APP-NPM-CVE-2026-45623 CVE-2026-45623 in postcss - Patched by Root

Root has patched CVE-2026-45623 in the postcss package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-R28C-9Q8G-F849 GHSA-r28c-9q8g-f849 in postcss - Patched by Root

Root has patched GHSA-r28c-9q8g-f849 in the postcss package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-RR7J-V2Q5-CHGV GHSA-rr7j-v2q5-chgv in langsmith - Patched by Root

Root has patched GHSA-rr7j-v2q5-chgv in the langsmith package for Root:PyPI. Multiple fixed versions available...

ECHO-3C27-FC81-AC46

Bulletin has no description...

ECHO-17D4-E111-8183

Bulletin has no description...

ROOT-APP-NPM-CVE-2022-29622 CVE-2022-29622 in formidable - Patched by Root

Root has patched CVE-2022-29622 in the formidable package for Root:npm. Multiple fixed versions available...

MINI-4R5R-6RGC-VVR5

Bulletin has no description...

MINI-J3PR-3W73-VGR5

Bulletin has no description...

MINI-8QVX-6VC3-VRVM

Bulletin has no description...

MINI-W5M3-QFC5-Q3Q2

Bulletin has no description...

ROOT-APP-MAVEN-CVE-2022-42004 CVE-2022-42004 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2022-42004 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

MINI-5MCC-C6F2-WJRG

Bulletin has no description...

DEBIAN-CVE-2026-64581

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...

DEBIAN-CVE-2026-64580

In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...

DEBIAN-CVE-2026-64573

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NVM tag length underflow in TLV parser In the TLVTYPENVM branch of qcatlvcheckdata the tag loop bound is "while idx length - sizeofstruct tlvtypenvm". "length" is a signed int from the firmware TLV header and...

DEBIAN-CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

DEBIAN-CVE-2026-64579

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrmhashrebuild reinsert xfrmhashrebuild's first loop preallocates the bins/chains the reinsert loop needs, so the reinsert after hlistdelrcu cannot allocate or fail. But its guard is...

DEBIAN-CVE-2026-64574

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...

DEBIAN-CVE-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

DEBIAN-CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...