BIT-LIBPYTHON-2026-11972 tarfile opened in streaming mode mishandles EOF

When using the "tarfile" module with a file opened in "streaming mode" mode="r|" the tarfile module did not properly handle EOF, making archive parsing take exponentially longer...

Cross Site Scripting

DOMPurify is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of cross-realm DOM elements in INPLACE mode, where elements from a different window or iframe bypass sanitization, allowing attackers to preserve and execute malicious JavaScript...

Security update for xen

This update for xen fixes the following issues CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. CVE-2026-62426,CVE-2026-62427: sysctl and platform-op...

SUSE-SU-2026:3423-1 Security update for xen

This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...

CLEANSTART-2026-KQ43009 Security fixes in kubernetes-dns-node-cache-fips 1.26.7-r0

Package kubernetes-dns-node-cache-fips version 1.26.7-r0 fixes 1 vulnerabilities: ghsa-527x-5wrf-22m2...

CLEANSTART-2026-NV83174 Security fixes in prometheus-node-exporter-fips 1.9.1-r0

Package prometheus-node-exporter-fips version 1.9.1-r0 fixes 1 vulnerabilities: ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-XF79120 Security fixes in minio-operator-fips 5.0.18-r7

Package minio-operator-fips version 5.0.18-r7 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-XM95550 Security fixes in kafka_exporter-fips 1.7.0-r2

Package kafkaexporter-fips version 1.7.0-r2 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-GP72642 Security fixes in k8ssandra-client-fips 0.8.7-r0

Package k8ssandra-client-fips version 0.8.7-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-JB22042 Security fixes in minio-operator-fips 5.0.19-r2

Package minio-operator-fips version 5.0.19-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-XH35177 Security fixes in kubernetes-csi-driver-nfs-fips 4.13.2-r0

Package kubernetes-csi-driver-nfs-fips version 4.13.2-r0 fixes 2 vulnerabilities: CVE-2026-29181, ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-IY64694 Security fixes in kubernetes-dashboard-api-fips 1.14.0-r1

Package kubernetes-dashboard-api-fips version 1.14.0-r1 fixes 27 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469, CVE-2026-39820, CVE-2026-25679, CVE-2026-27143...

CLEANSTART-2026-RE00985 Security fixes in velero-plugin-for-microsoft-azure-fips 1.14.0-r2

Package velero-plugin-for-microsoft-azure-fips version 1.14.0-r2 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-BX90516 Security fixes in cert-manager-cmctl-fips 2.4.0-r3

Package cert-manager-cmctl-fips version 2.4.0-r3 fixes 30 vulnerabilities: CVE-2026-27143, CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-32281...

CLEANSTART-2026-HY96164 Security fixes in kubernetes-event-exporter-fips 1.7-r0

Package kubernetes-event-exporter-fips version 1.7-r0 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...

CLEANSTART-2026-BA39475 Security fixes in external-secrets-fips 0.17.0-r2

Package external-secrets-fips version 0.17.0-r2 fixes 75 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2025-61726, CVE-2026-27143, CVE-2025-68121...

CVE-2026-47858

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Thei...

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

prismor v1.35.0

Prismor Runtime security hooks for Claude Code, Codex, and other AI coding agents. Prismor can also be used in observe mode to see agent session activity and dangerous actions in a local self-serve dashboard Website • Onboard with Skill !Trae / Trae CNht...

kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...