ai-stp-cli (>=0.0.23, <=0.0.33), pygpt-net (>=2.8.27, <=2.9.1) +1 more potentially affected by CVE-2026-104843 via uv (>=0.12.10, <=0.12.15)

uv PYPI version =0.12.10, =0.0.23, =2.8.27, =2.9.1 - uvenv 3.11.1 Source cves: CVE-2026-104843 Source advisory: GHSA-2CV4-CQWR-GWF7...

@sumaris-net/ngx-components (18.5.0-alpha2), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/android (>=6.1.2, <=6.2.0)

@capacitor/android NPM version =6.1.2, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

@sumaris-net/ngx-components (18.5.0-alpha2), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/android (>=6.1.2, <=6.2.0)

@capacitor/android NPM version =6.1.2, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

CVE-2026-90065

A flaw was found in the Linux kernel's net/smc component. A local unprivileged user can exploit this vulnerability by repeatedly attempting to create IPPROTOSMC sockets while a BPF Berkeley Packet Filter program denies the creation. This leads to a memory leak, allowing the user to consume...

CVE-2026-90108

A flaw was found in the Linux kernel's net/smc component. During a specific state transition in the smcllceventhandler, a previously stashed memory object qentry is overwritten without being properly freed. This oversight leads to a memory leak, where allocated memory is not released, potentially...

SUSE CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

CVE-2026-90107

A flaw was found in the Linux kernel's net/smc component. The smcllcflowstop function, responsible for stopping a flow, performs a blind memory reset without first freeing a pending queue entry. This can lead to a memory leak if a duplicate link message arrives during a specific timing window,...

CVE-2026-37719

An issue in dormakaba evolo Service all versions allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component...

SUSE-SU-2026:24094-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63917: ip6: vti: Use ip6tnl.net in...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: fixed information leakage in /proc/net/ptype In one net namespace, after creating a packet socket without binding it to a device, users in other net namespaces can observe the newly added packettype by reading the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ICMP: Prevent possible NULL dereferencing from icmpbuildprobe. The first issue involves a double call to indevgetrcu; the second call might return NULL. if indevgetrcudev && indevgetrcudev-ifalist The second issue involves...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/sched: schets: do not peek at classes beyond ‘nbands’ When the number of DRR classes decreases, the round-robin active list may contain elements that have already been freed in etsqdiscchange. As a result, it’s possible to...

kernel: net/sched: act_ct: Only release RCU read lock after ct_ft

A flaw was found in the Linux kernel. A race condition in the actct module, specifically during the flow table lookup, can lead to a Use-After-Free UAF vulnerability. This occurs because a critical lock is released prematurely, allowing a memory object to be freed while still in use. An attacker...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

K000163548: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2025-71066 In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeu...

CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

DEBIAN-CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

UBUNTU-CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...

CVE-2026-72887

A flaw was found in Net::OAuth::Client. A malicious service provider can silently downgrade an OAuth 1.0a connection to OAuth 1.0 by omitting the oauthcallbackconfirmed parameter in the request token response. This downgrade vulnerability removes the oauthverifier binding, making the application...

EUVD-2026-92267

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...