CLSA-2026-1787001707 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.0-tuxcare.2...

MINI-2G3X-3F79-GG59

Bulletin has no description...

MINI-44P8-68W5-3G93

Bulletin has no description...

CVE-2026-71553 ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS

ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set and apos.util.get, allowing an authenticated editor to overwrite the shared...

CVE-2026-71553 ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS

ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set and apos.util.get, allowing an authenticated editor to overwrite the shared...

CVE-2026-71553 ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS

ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set and apos.util.get, allowing an authenticated editor to overwrite the shared...

MINI-8498-8PQ2-52M9

Bulletin has no description...

MINI-5HC8-F4PG-V75V

Bulletin has no description...

MINI-MWXH-F4RW-66PW

Bulletin has no description...

MINI-2F3G-6J7G-VHHG

Bulletin has no description...

MINI-QVX8-J2R9-HVX7

Bulletin has no description...

MINI-5FPF-RW7M-Q25J

Bulletin has no description...

MINI-8XWX-4534-CP8F

Bulletin has no description...

MINI-627V-HJCH-25PR

Bulletin has no description...

MINI-232P-VM7X-F3GQ

Bulletin has no description...

MINI-W7WG-5WM9-2Q4X

Bulletin has no description...

MINI-QC5H-4P6Q-4WF2

Bulletin has no description...

MINI-24W5-R8VF-3PPF

Bulletin has no description...

CLSA-2026-1786995617 TuxCare security update for 22 packages (9 CVEs)

TuxCare rebuilt 22 packages to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...

CVE-2026-8723

A flaw was found in the qs library. When the qs.stringify function processes arrays containing null or undefined elements, and is configured with both arrayFormat: 'comma' and encodeValuesOnly: true, it can trigger a TypeError. This error causes the application to crash or return a 500 error,...