CLSA-2026-1772410264 TuxCare security update for werkzeug (2 CVEs)

TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 1.0.1.post2+tuxcare...

CLSA-2026-1772496669 TuxCare security update for pymongo (1 CVE)

TuxCare rebuilt pymongo to address 1 CVE. Fixed in 3.13.0.post1+tuxcare...

CLSA-2026-1772410266 TuxCare security update for werkzeug (2 CVEs)

TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 1.0.1.post3+tuxcare...

CLSA-2025-1756426301 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.post1+tuxcare...

CLSA-2025-1761696690 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post6+tuxcare...

CLSA-2026-1767658110 TuxCare security update for 5 packages (3 CVEs)

TuxCare rebuilt 5 packages to address 3 CVEs. Fixed in 9.4.24.v20191120-tuxcare.1...

CLSA-2025-1765411679 TuxCare security update for 8 packages (2 CVEs)

TuxCare rebuilt 8 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.4...

CLSA-2025-1763597253 TuxCare security update for 46 packages (2 CVEs)

TuxCare rebuilt 46 packages to address 2 CVEs. Fixed in 9.4.53.v20231009-tuxcare.1...

CLSA-2025-1761523598 TuxCare security update for org.springframework:spring-websocket (1 CVE)

TuxCare rebuilt org.springframework:spring-websocket to address 1 CVE. Fixed in 5.3.39-tuxcare.9...

CLSA-2025-1759795580 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 19 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.1...

CLSA-2025-1761005194 TuxCare security update for 8 packages (1 CVE)

TuxCare rebuilt 8 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.3...

ROOT-APP-NPM-CVE-2024-8373 CVE-2024-8373 in angular - Patched by Root

Root has patched CVE-2024-8373 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21490 CVE-2024-21490 in angular - Patched by Root

Root has patched CVE-2024-21490 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-7676 CVE-2020-7676 in angular - Patched by Root

Root has patched CVE-2020-7676 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-26116 CVE-2023-26116 in angular - Patched by Root

Root has patched CVE-2023-26116 in the angular package for Root:npm. Multiple fixed versions available...

Exploit for CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE The diffpatch endpo...

ROOT-APP-MAVEN-GHSA-2M67-WJPJ-XHG9 GHSA-2m67-wjpj-xhg9 in tools.jackson.core:jackson-core - Patched by Root

Root has patched GHSA-2m67-wjpj-xhg9 in the tools.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...

AIOHTTP: HTTP request smuggling via WebSocket upgrade

SummaryThe HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. ImpactIf using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware ...

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...

gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

Summaryconsultgeminiwithfiles in inline mode read any file path supplied inthe files argument without confining it to the working directory, thenforwarded the contents to the Gemini CLI. Because the caller also controlsquery, the file contents are echoed back through the Gemini round-tripand sent...