Linux Distros Unpatched Vulnerability : CVE-2025-12734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowe...

MiracleLinux 8 : httpd:2.4 (AXSA:2021-2541:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2541:01 advisory. httpd: modsession: NULL pointer dereference when parsing Cookie header CVE-2021-26690 httpd: Unexpected URL matching with 'MergeSlashes OFF'...

MiracleLinux 8 : httpd:2.4 (AXSA:2021-2774:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2774:01 advisory. httpd: modsession: NULL pointer dereference when parsing Cookie header CVE-2021-26690 httpd: Unexpected URL matching with 'MergeSlashes OFF'...

CLSA-2026-1768580474 php: Fix of CVE-2025-14178

CVE-2025-14178: fix integer overflow in arraymerge to prevent potential denial of service when merging arrays with total elements exceeding HTMAXSIZE...

Malicious Package

Overview tailwind-merge-v3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview tailwind-merge-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-3051

Malicious code in tailwind-merge-v2 npm...

MAL-2026-316 Malicious code in tailwind-merge-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7eb6509e7116f0d29cc221829baf733446faecce580b8d9334b6a43586ad58 The package tailwind-merge-v3 was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-merge-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe4dad53bfa4f2ffe409644975e17958c4a1ab064109707aa6d944c1030b959 The package tailwind-merge-v2 was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3050

Malicious code in tailwind-merge-v3 npm...

Malicious code in tailwind-merge-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7eb6509e7116f0d29cc221829baf733446faecce580b8d9334b6a43586ad58 The package tailwind-merge-v3 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-315 Malicious code in tailwind-merge-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe4dad53bfa4f2ffe409644975e17958c4a1ab064109707aa6d944c1030b959 The package tailwind-merge-v2 was found to contain malicious code. Source: ghsa-malware...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004353 advisory. In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a...

MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.181-2.6.14.1.AXS4 (AXSA:2018-2999:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2999:02 advisory. OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass Hotspot, 8192025 CVE-2018-2814 OpenJDK: unrestricted deserialization of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001594)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001594 advisory. fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service NULL pointer dereference and panic by using a noflushmerge option...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003471 advisory. fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service NULL pointer dereference and panic by using a noflushmerge option...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002681 advisory. The xenbiovecphysmergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002906 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in trymergefreespace when mounting a crafted btrfs image, because of a lack of...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a page merge that does not update the migration type of all page blocks, which could result in inconsistent...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001088 advisory. The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass...