CLSA-2026-1792361364 TuxCare security update for @babel/helper-compilation-targets (2 CVEs)

TuxCare rebuilt @babel/helper-compilation-targets to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792361362 TuxCare security update for @babel/helper-compilation-targets (2 CVEs)

TuxCare rebuilt @babel/helper-compilation-targets to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792361352 TuxCare security update for @babel/helper-compilation-targets (1 CVE)

TuxCare rebuilt @babel/helper-compilation-targets to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

EUVD-2025-28862

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CLSA-2026-1792346462 TuxCare security update for @next/swc-linux-x64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 1 CVE. Fixed in 15.5.26-tuxcare.1...

CLSA-2026-1792342451 TuxCare security update for @babel/register (2 CVEs)

TuxCare rebuilt @babel/register to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792342449 TuxCare security update for @babel/register (2 CVEs)

TuxCare rebuilt @babel/register to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792340702 TuxCare security update for @esbuild/linux-ppc64 (1 CVE)

TuxCare rebuilt @esbuild/linux-ppc64 to address 1 CVE. Fixed in 0.23.0-tuxcare.1...

CLSA-2026-1792340701 TuxCare security update for @esbuild/linux-ppc64 (1 CVE)

TuxCare rebuilt @esbuild/linux-ppc64 to address 1 CVE. Fixed in 0.19.11-tuxcare.1...

IBM Storage TS4500 Library: Competing conditions issue vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability due to race conditions. This vulnerability may allow remote authenticated attackers to obtain unauthorized management privileges...

IBM Storage TS4500 Library Session Mechanism Vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability related to session mechanisms. This vulnerability arises from sessions not being invalidated, which may allow authenticated users to impersonate another user on the system...

IBM Storage TS4500 Library Session Mechanism Vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability related to session management. This vulnerability arises from the failure to invalidate sessions after they are logged out, which may allow authenticated users to impersonate other users on the system...

IBM Storage TS4500 Library Resource Management Vulnerability

The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a resource management vulnerability. This vulnerability arises from specially crafted SMTP requests, which consume excessive system resources and may cause denial of service for authenticated users...

UBUNTU-CVE-2026-112055

wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPXFKP and wvGetCHPXFKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...

UBUNTU-CVE-2026-112056

wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets. Attackers can provide a .doc file with ten or fewer styles or out-of-range style base indexes to read past...

CLSA-2026-1792327052 TuxCare security update for lodash.clonedeep (1 CVE)

TuxCare rebuilt lodash.clonedeep to address 1 CVE. Fixed in 4.5.0-tuxcare.8...

CLSA-2026-1792326317 TuxCare security update for @next/react-refresh-utils (2 CVEs)

TuxCare rebuilt @next/react-refresh-utils to address 2 CVEs. Fixed in 13.5.11-tuxcare.18...

CLSA-2026-1792326298 TuxCare security update for @next/react-refresh-utils (5 CVEs)

TuxCare rebuilt @next/react-refresh-utils to address 5 CVEs. Fixed in 16.0.6-tuxcare.13...

UBUNTU-CVE-2026-112021

snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...

UBUNTU-CVE-2026-112007

Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmtultloadsong in fmt/ult.c that fails to clamp the one-byte sample count to MAXSAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csfdestroy to free...