PT-2026-90471

In the Linux kernel, the following vulnerability has been resolved: mm/migrate device: clear stale mapping after freeing swapcache migrate device pages reads the folio mapping before calling folio free swap. When folio free swap succeeds, the folio is removed from the swap cache, but the saved...

CVE-2026-50553 Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)

Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug values with the OpenAPI/huma tag pattern:"a-z0-9-+". huma compiles this with regexp.MustCompiles.Pattern and tests it with patternRe.MatchStringstr, an UNANCHORED match. Because th...

CVE-2026-50553

Note Mark (open-source Go note-taking app, module github.com/enchant97/note-mark/backend) is vulnerable to a path traversal in its data-export CLI commands (migrate export and migrate export-v1) prior to version 0.19.5 . The root cause is an unanchored regex ([a-z0-9-]+) used to validate book and...

CVE-2026-50553 Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)

Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug values with the OpenAPI/huma tag pattern:"a-z0-9-+". huma compiles this with regexp.MustCompiles.Pattern and tests it with patternRe.MatchStringstr, an UNANCHORED match. Because th...

CVE-2026-84778

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84778 WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84778 WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

EUVD-2026-70572

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84778

An unauthenticated Denial of Service vulnerability affects the Migrate Guru – Site Migration & Cloning WordPress plugin in versions

CVE-2026-84778: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

PT-2026-85114

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Migrate Guru – Site Migration & Cloning versions = 6.65...

PT-2026-82986

In the Linux kernel, the following vulnerability has been resolved: mm: migrate device: fix pte pfn/pte dirty called on non-present PTE pte pfn and pte dirty have undefined behaviour when called on a non-present PTE. In migrate vma collect pmd, these functions may be invoked on non-present entrie...

SUSE CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644 mm/damon/ops-common: putback folios on invalid migrate nid

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: slsa-verifier, hubble, terraform-provider-pagerduty, promxy, tetragon, thanos, consul-k8s, datadog-agent, wal-g, ratify, splunk-otel-collector, kubescape-operator, migrate, ferretdb, dapr, external-secrets-operator, juicefs, ksops, tekton-chains, cilium, weaviate,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: trino, cluster-autoscaler, nginx-prometheus-exporter, azuredisk-csi, buildah, cert-manager-cmctl, metrics-server, pulumi-kubernetes-operator, runc, terraform-provider-pagerduty, kubernetes-csi-livenessprobe, terraform-provider-random, containerd, external-dns,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: podinfo, rancher-fleet, rancher-webhook, trino, cluster-autoscaler, tigera-operator, buildah, metrics-server, pulumi-kubernetes-operator, runc, opa-envoy, nri-apache, kubernetes-csi-livenessprobe, flux-kustomize-controller, containerd, nri-consul,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: trino, tigera-operator, buildah, metrics-server, runc, nri-apache, nri-postgresql, terraform-provider-pagerduty, helm-docs, containerd, mods, container-object-storage-interface, rabbitmq-default-user-credential-updater, secrets-store-csi-driver, keda, mattermost,...