CLSA-2026-1792369505 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792369501 TuxCare security update for @babel/helper-plugin-utils (2 CVEs)

TuxCare rebuilt @babel/helper-plugin-utils to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...

CLSA-2026-1792369499 TuxCare security update for @babel/helper-plugin-utils (2 CVEs)

TuxCare rebuilt @babel/helper-plugin-utils to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792369500 TuxCare security update for @babel/helper-plugin-utils (2 CVEs)

TuxCare rebuilt @babel/helper-plugin-utils to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792369495 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.24.5-tuxcare.2...

CLSA-2026-1792369494 TuxCare security update for @babel/helper-plugin-utils (1 CVE)

TuxCare rebuilt @babel/helper-plugin-utils to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792369452 TuxCare security update for dompurify (6 CVEs)

TuxCare rebuilt dompurify to address 6 CVEs. Fixed in 3.0.6-tuxcare.3...

CLSA-2026-1792369404 TuxCare security update for tar (9 CVEs)

TuxCare rebuilt tar to address 9 CVEs. Fixed in 6.1.0-tuxcare.2...

MAL-2026-17372 Malicious code in @ostyado/baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

CLSA-2026-1792369174 TuxCare security update for minimatch (2 CVEs)

TuxCare rebuilt minimatch to address 2 CVEs. Fixed in 10.2.2-tuxcare.1...

CLSA-2026-1792369116 TuxCare security update for markdown-it (2 CVEs)

TuxCare rebuilt markdown-it to address 2 CVEs. Fixed in 12.3.2-tuxcare.1...

CLSA-2026-1792369098 TuxCare security update for ip-address (4 CVEs)

TuxCare rebuilt ip-address to address 4 CVEs. Fixed in 10.5.0-tuxcare.1...

CLSA-2026-1792369063 TuxCare security update for devalue (7 CVEs)

TuxCare rebuilt devalue to address 7 CVEs. Fixed in 5.8.2-tuxcare.1...

CLSA-2026-1792369062 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.5.9-tuxcare.9...

AGCRE Regular Expression Library 20261015

AGCRE is a BSD-licensed regular expression library written in C that implements pattern compilation and matching using a Pike Virtual Machine architecture. It supports POSIX regular expressions, Perl-style escapes, lazy matching, non-capturing groups, backreferences, Unicode escapes, UTF-8, and...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-107081

The SENAYAN Library Management System (SLiMS) Bulian 9.8.0 is vulnerable to SQL injection via identifier injection in three admin AJAX endpoints: admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. The root cause is the direct interpolation of tableName ...

Skia Graphic Library Access Information Disclosure

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to protected information through a specially created HTML page...

PT-2026-117645

Name of the Vulnerable Software and Affected Versions Pillow versions 7.2.0 through 12.11.0 Description A flaw exists when processing MIC images, where the library can enter an infinite loop while determining the frame count. This occurs because MicImageFile inherits TIFF frame traversal, but...

CVE-2026-107081

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...