Rocky Linux 9 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlba-2025_20841)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-202520841 advisory. For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section. This advisory is provided by Ctrl IQ,...

Rocky Linux 8 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlsa-2023_3949)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233949 advisory. open-vm-tools: authentication bypass vulnerability in the vgauth module CVE-2023-20867 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: isns-utils / isns-utils-debuginfo / isns-utils-debugsource / etc (crlsa-2026_53847)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202653847 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly fr...

PT-2026-103760

Name of the Vulnerable Software and Affected Versions oauth-proxy affected versions not specified Description The application fails to properly validate the destination redirect parameter rd during post-login redirection. A remote attacker can exploit this by enticing a user to follow a specially...

Rocky Linux 8 [CIQ] Security Update: apache-commons-collections / apache-commons-lang / bea-stax-api / etc Multiple Vulnerabilities (crlsa-2019_1529)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20191529 advisory. tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up CVE-2018-8037 tomcat: Insecure defaults in CORS filter enable...

Rocky Linux 8 [CIQ] Security Update: mod_md / mod_md-debuginfo / mod_md-debugsource Multiple Vulnerabilities (crlsa-2020_4751)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204751 advisory. httpd: memory corruption on early pushes CVE-2019-10081 httpd: read-after-free in h2 connection shutdown CVE-2019-10082 httpd: null-pointer dereference in...

CentOS Linux 8.4 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.4:CLSA-2026:1784800112)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784800112 advisory. - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the...

AlmaLinux 9.6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.6:CLSA-2026:1784888515)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784888515 advisory. - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the...

CentOS Linux 8.5 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.5:CLSA-2026:1784800609)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1784800609 advisory. - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the...

Rocky Linux 8 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel Multiple Vulnerabilities (crlsa-2020_3032)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20203032 advisory. modauthopenidc: Open redirect in logout url when using URLs with leading slashes CVE-2019-14857 modauthopenidc: Open redirect issue exists in URLs with sla...

CVE-2026-103591

DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repourl parameter. Attackers can supply a non-URL repourl value to bypass path containment checks and read any file accessible to the API process by...

CVE-2026-103591 DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file

DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repourl parameter. Attackers can supply a non-URL repourl value to bypass path containment checks and read any file accessible to the API process by...

CVE-2026-103591 DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file

DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repourl parameter. Attackers can supply a non-URL repourl value to bypass path containment checks and read any file accessible to the API process by...

CVE-2026-103591

The software DeepWiki-Open (through commit d92819a ) contains an unauthenticated arbitrary file read vulnerability. This flaw exists in the GET /codemap/file endpoint via the repo_url parameter. By providing a non-URL value for repo_url , an attacker can bypass path containment checks to read any...

Legit Security launches agentic remediation for open-source dependency vulnerabilities

Tel Aviv, Israel, 30th September 2026, CyberNewswire...

CVE-2026-88791

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...

WordPress Safe Redirect Manager plugin < 2.3.0 - Open Redirect vulnerability

Open Redirect vulnerability discovered by berke bodur in WordPress Plugin Safe Redirect Manager versions 2.3.0...

CVE-2026-88791 Safe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect Rules

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...

CVE-2026-88791

The Safe Redirect Manager WordPress plugin, in versions before 2.3.0 , is vulnerable to an open redirect flaw. The root cause is improper validation of the redirect destination when a wildcard redirect rule to an absolute URL is configured. This allows unauthenticated attackers to redirect site v...

EUVD-2026-89613

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path...