0x20bf (0.0.1), 2keys (0.5.1) +3662 more potentially affected by CVE-2026-111064 via aiohttp (>=0.6.4, <=3.14.3)

aiohttp PYPI version =0.6.4, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-111064 Source advisory: MEND:CVE-2026-111064...

CLSA-2026-1792428449 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.18.0-tuxcare.1...

CLSA-2026-1792428438 TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.11.3-tuxcare.1...

CLSA-2026-1792428396 TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.10.0-tuxcare.1...

CLSA-2026-1792428388 TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.10.4-tuxcare.1...

CLSA-2026-1792428307 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.9.6-tuxcare.1...

0x20bf (0.0.1), 2keys (0.5.1) +3662 more potentially affected by CVE-2026-111063 via aiohttp (>=0.6.4, <=3.14.3)

aiohttp PYPI version =0.6.4, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-111063 Source advisory: MEND:CVE-2026-111063...

CLSA-2026-1792428247 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.8.11-tuxcare.1...

CLSA-2026-1792428221 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.8.8-tuxcare.1...

CLSA-2026-1792428198 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.8-tuxcare.1...

CLSA-2026-1792428196 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.4-tuxcare.1...

CLSA-2026-1792428179 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.9-tuxcare.1...

CLSA-2026-1792427749 TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 1 CVE. Fixed in 3.3.12-tuxcare.3...

CLSA-2026-1792427260 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.7.0-tuxcare.1...

CLSA-2026-1792427235 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.6.0-tuxcare.1...

CLSA-2026-1792427000 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792426996 TuxCare security update for @babel/plugin-transform-sticky-regex (1 CVE)

TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CVE-2026-107081

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

UBUNTU-CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

UBUNTU-CVE-2026-112307

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...