CLSA-2026-1792440931 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.9.3-tuxcare.1...

@0xwork/connect (>=0.1.0, <=0.1.9), @7n/rules (>=1.0.0, <=1.118.11) +564 more potentially affected by CVE-2026-111766 via markdown-it (>=14.0.0, <=14.3.2)

markdown-it NPM version =14.0.0, =0.1.0, =1.0.0, =0.25.0, =3.378.0, =2026.6.2, =4.10.0, =0.18.0, =2026.4.23-zh, =1.0.0-next.0, =1.0.0, =5.52.1-fa.2, =5.52.1-fa.2, =5.52.1-fa.6 - @akbarsafari00/content-manager 5.52.1-fa.1 - @akbarsafari00/strapi 5.52.1-fa.1 and more Source cves: CVE-2026-111766...

@0xwork/connect (>=0.1.0, <=0.1.9), @7n/rules (>=1.0.0, <=1.118.11) +564 more potentially affected by CVE-2026-111766 via markdown-it (>=14.0.0, <=14.3.2)

markdown-it NPM version =14.0.0, =0.1.0, =1.0.0, =0.25.0, =3.378.0, =2026.6.2, =4.10.0, =0.18.0, =2026.4.23-zh, =1.0.0-next.0, =1.0.0, =5.52.1-fa.2, =5.52.1-fa.2, =5.52.1-fa.6 - @akbarsafari00/content-manager 5.52.1-fa.1 - @akbarsafari00/strapi 5.52.1-fa.1 and more Source cves: CVE-2026-111766...

CLSA-2026-1792438126 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792438118 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.24.5-tuxcare.2...

CLSA-2026-1792438116 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792438117 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792438115 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1792438114 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792438112 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1792438113 TuxCare security update for @babel/plugin-transform-classes (1 CVE)

TuxCare rebuilt @babel/plugin-transform-classes to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

UBUNTU-CVE-2025-60482

A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-112769 via parse-server (>=9.6.0-alpha.37, <=9.10.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-112769 Source advisory: MEND:CVE-2026-112769...

@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-112768 via parse-server (>=9.6.0-alpha.37, <=9.10.0)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-112768 Source advisory: MEND:CVE-2026-112768...

CLSA-2026-1792435131 TuxCare security update for @babel/plugin-transform-for-of (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-for-of to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792434736 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.4.0-tuxcare.1...

CLSA-2026-1792434304 TuxCare security update for com.fasterxml.jackson.core:jackson-core (4 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 4 CVEs. Fixed in 2.13.3-tuxcare.1...

@eui/deps-base (>=21.0.0-next.10, <=21.0.0-next.51), @eui/deps-base-light (>=21.0.0-next.10, <=21.0.0-next.51) +1 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=21.0.0, <=21.0.2)

@angular/common NPM version =21.0.0, =21.0.0-next.10, =21.0.0-next.10, =21.0.0-next.51 - zax-dashboard 1.0.14 Source cves: CVE-2025-66035, CVE-2026-111753 Source advisory: MEND:CVE-2026-111753...

@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +34 more potentially affected by CVE-2025-66035 +1 more via @angular/common (>=20.0.0, <=20.3.29)

@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.5-snapshot-1748673884997, =19.2.5-snapshot-1748673884997, =8.9.1, =8.9.1, =2.0.12, =1.1.89, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2025-66035, CVE-2026-111753 Source...

UBUNTU-CVE-2026-111759

markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrusted input. Many opening double quotes...