CLEANSTART-2026-CJ45567 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

CVE-2026-25681 affects multiple packages. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. See references for individual vulnerability details...

CLEANSTART-2026-FO54280 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

CVE-2026-25680 affects multiple packages. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...

CLEANSTART-2026-AM91695 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

CVE-2026-46595 affects multiple packages. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped. See references for individual vulnerability...

CLEANSTART-2026-CD57070 Parsing a WEBP image with an invalid, large size panics on 32-bit platforms

CVE-2026-33813 affects multiple packages. Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. See references for individual vulnerability details...

ai.koryki.core:koryki-postgresql (>=0.1.0, <=0.2.1), ai.koryki.core:koryki-tools (>=0.1.0, <=0.2.1) +1698 more potentially affected by CVE-2026-107314 via org.postgresql:postgresql (>=42.7.11, <=42.7.13)

org.postgresql:postgresql MAVEN version =42.7.11, =0.1.0, =0.1.0, =0.0.22, =0.1.7, =0.1.31, =0.4.1-alpha.1, =0.4.1-alpha.1, =0.4.1-alpha.1, =2026.05.22.123329-8a3cc57, =2026.10.01.201111-ad9f619 and more Source cves: CVE-2026-107314 Source advisory: SNYK:JAVA-ORGPOSTGRESQL-20571163...

ai.agentican:agentican-quarkus-otel-store-jpa (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-store-jpa (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +3654 more potentially affected by CVE-2026-107315 via org.postgresql:postgresql (>=42.7.4, <=42.7.13)

org.postgresql:postgresql MAVEN version =42.7.4, =0.1.0-alpha.1, =0.1.0-alpha.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.4.2, =0.1.0, =0.1.0, =0.0.2, =0.8.4 and more Source cves: CVE-2026-107315 Source advisory: SNYK:JAVA-ORGPOSTGRESQL-20571178...

OPENSUSE-SU-2026:12080-1 bcel-6.13.0-1.1 on GA media

These are all security issues fixed in the bcel-6.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12079-1 aspell-0.60.8.2-2.1 on GA media

These are all security issues fixed in the aspell-0.60.8.2-2.1 package on the GA media of openSUSE Tumbleweed...

Go Excel Library GetSlicers DoS

The vulnerability of the GetSlicers method in the Go language library for reading and writing Excel spreadsheets is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Go Excel flatCols DoS

The vulnerability of the flatCols function in the Go language library for reading and writing Excel spreadsheets is related to uncontrolled memory allocation. Exploiting this vulnerability could allow an attacker to cause service interruptions...

PT-2026-107775

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

OPENSUSE-SU-2026:12087-1 python310-3.10.22-1.1 on GA media

These are all security issues fixed in the python310-3.10.22-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-87676: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

OPENSUSE-SU-2026:12078-1 ImageMagick-7.1.2.32-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.32-1.1 package on the GA media of openSUSE Tumbleweed...

ai.agentican:agentican-quarkus-otel-store-jpa (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-store-jpa (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +3654 more potentially affected by CVE-2026-107315 via org.postgresql:postgresql (>=42.7.4, <=42.7.13)

org.postgresql:postgresql MAVEN version =42.7.4, =0.1.0-alpha.1, =0.1.0-alpha.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.4.2, =0.1.0, =0.1.0, =0.0.2, =0.8.4 and more Source cves: CVE-2026-107315 Source advisory: MEND:CVE-2026-107315...

ai.koryki.core:koryki-postgresql (>=0.1.0, <=0.2.1), ai.koryki.core:koryki-tools (>=0.1.0, <=0.2.1) +1698 more potentially affected by CVE-2026-107314 via org.postgresql:postgresql (>=42.7.11, <=42.7.13)

org.postgresql:postgresql MAVEN version =42.7.11, =0.1.0, =0.1.0, =0.0.22, =0.1.7, =0.1.31, =0.4.1-alpha.1, =0.4.1-alpha.1, =0.4.1-alpha.1, =2026.05.22.123329-8a3cc57, =2026.10.01.201111-ad9f619 and more Source cves: CVE-2026-107314 Source advisory: MEND:CVE-2026-107314...

CLSA-2026-1791413854 TuxCare security update for @opentelemetry/core (1 CVE)

TuxCare rebuilt @opentelemetry/core to address 1 CVE. Fixed in 1.17.1-tuxcare.1...

CLSA-2026-1791413402 TuxCare security update for @opentelemetry/core (1 CVE)

TuxCare rebuilt @opentelemetry/core to address 1 CVE. Fixed in 1.30.1-tuxcare.1...

be.wegenenverkeer:rxhttpclient (2.0.1), be.wegenenverkeer:rxhttpclient-fs2_2.13 (2.0.1) +146 more potentially affected by CVE-2026-107229 via org.asynchttpclient:async-http-client (>=2.16.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =2.16.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =20.0.0, =20.0.0, =2.0.0, =0.4.7, =0.4.7, =7.0.1-preview.revert-166-add-carabiner-to-gitignore.2026-08-26t0954.49066386 and more Source cves: CVE-2026-107229 Source advisory:...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +101 more potentially affected by CVE-2026-107231 via org.asynchttpclient:async-http-client (>=3.0.0.beta1, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0.beta1, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107231 Source advisory: SNYK:JAVA-ORGASYNCHTTPCLIENT-20571397...