Updated cockpit packages fix security vulnerabilities

CVE-2026-4631, Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects...

UBUNTU-CVE-2021-23337

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...