Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017686 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.22 and prior. Difficul...

openSUSE 16 Security Update : wireshark (openSUSE-SU-2026:20685-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20685-1 advisory. This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor...

OESA-2026-2256 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-016820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016820 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Options. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and...

Photon OS 5.0: Mysql PHSA-2026-5.0-0842

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0842. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

@adlanarifzr/mikro-orm-migrations (>=7.0.5-next.0, <=7.0.9), @mikro-orm/entity-generator (>=7.0.0-dev.97, <=7.0.13) +10 more potentially affected by CVE-2026-44680 via @mikro-orm/sql (>=7.0.0-dev.97, <=7.0.13)

@mikro-orm/sql NPM version =7.0.0-dev.97, =7.0.5-next.0, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.316, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.13 - @reldens/cms 0.61.0 - @reldens/storage 0.93.0 Source cves: CVE-2026-44680 Source advisory:...

@adlanarifzr/mikro-orm-migrations (>=7.0.5-next.0, <=7.0.9), @mikro-orm/entity-generator (>=7.0.0-dev.97, <=7.0.14-dev.14) +10 more potentially affected by CVE-2026-44680 via @mikro-orm/sql (>=7.0.0-dev.97, <=7.0.14-dev.14)

@mikro-orm/sql NPM version =7.0.0-dev.97, =7.0.5-next.0, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.0-dev.316, =7.0.0-dev.97, =7.0.0-dev.97, =7.0.14-dev.14 - @reldens/cms 0.61.0 - @reldens/storage 0.93.0 Source cves: CVE-2026-44680 Source...

CVE-2026-41496

PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and praisonaiagents version 1.6.9, the fix for CVE-2026-40315 added input validation to SQLiteConversationStore only. Nine sibling backends — MySQL, PostgreSQL, async SQLite/MySQL/PostgreSQL, Turso, SingleStore, Supabase,...

CLSA-2026-1773654558 mysql: Fix of 7 CVEs

Update to MySQL 8.0.45 January 2026 CPU CVE-2026-21968 CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21964 CVE-2025-9230...

emlog cross-site request forge vulnerability

Emlog is an open-source CMS website building system based on PHP and MySQL. Versions of Emlog prior to 2.6.11 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from the lack of CSRF protection in critical management functions, which could allow attackers to trick...

diesel-async may expose uninitialized padding bytes for MySQL temporal columns

Summary diesel-async exposes uninitialized stack padding to safe code on every read of a MySQL DATE, TIME, DATETIME, or TIMESTAMP column. Reading that buffer is undefined behavior, and the leaked bytes can contain stale heap/stack contents, so this is both a soundness bug and a potential...

GHSA-FF9Q-RM55-Q7QR diesel-async may expose uninitialized padding bytes for MySQL temporal columns

Summary diesel-async exposes uninitialized stack padding to safe code on every read of a MySQL DATE, TIME, DATETIME, or TIMESTAMP column. Reading that buffer is undefined behavior, and the leaked bytes can contain stale heap/stack contents, so this is both a soundness bug and a potential...

PT-2026-41490

Summary diesel-async exposes uninitialized stack padding to safe code on every read of a MySQL DATE, TIME, DATETIME, or TIMESTAMP column. Reading that buffer is undefined behavior, and the leaked bytes can contain stale heap/stack contents, so this is both a soundness bug and a potential...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0842

Updates of 'mysql', 'dotnet-runtime', 'linux-esx', 'linux' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0842

Updates of 'mysql', 'linux-esx', 'linux' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2026-4.0-1011

Updates of 'mysql' packages of Photon OS have been released...

CVE-2026-42237

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy MySQL v1 node. Both nodes construct SQL queries by directly interpolating user-controlled table names, column names, a...

CVE-2026-42237 n8n: SQL Injection in Snowflake and MySQL Nodes

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy MySQL v1 node. Both nodes construct SQL queries by directly interpolating user-controlled table names, column names, a...

CVE-2026-42237 n8n: SQL Injection in Snowflake and MySQL Nodes

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy MySQL v1 node. Both nodes construct SQL queries by directly interpolating user-controlled table names, column names, a...

CVE-2026-42237

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy MySQL v1 node. Both nodes construct SQL queries by directly interpolating user-controlled table names, column names, a...