RHSA-2026:37094 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CVE-2026-46421

The CVE concerns a supply-chain compromise in the SAP Cloud Application Programming Model’s cap-js/cds-dbs monorepo. On 2026-04-29, compromised versions of @cap-js/[email protected], @cap-js/[email protected], and @cap-js/[email protected] were published; these malicious packages harvested credentials (n...

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity. The affected packages are listed below - @asyncapi/[email protected]...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.48 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Oracle Linux 7 : 389-ds-base (ELSA-2026-26453)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26453 advisory. - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-14905 Orabug: 39146844 Tenable has extracted the preceding description block...

GHSA-WQXF-PJXH-HH4H vulnerabilities

Vulnerabilities for packages: python...

GHSA-GF2W-JQMQ-FCM8 vulnerabilities

Vulnerabilities for packages: python...

GHSA-G345-7JG6-M22P vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-4360 vulnerabilities

Vulnerabilities for packages: python...

GHSA-9MC4-RQMQ-H467 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-11972 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-0864 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-59871 vulnerabilities

Vulnerabilities for packages: npm...

GHSA-G345-7JG6-M22P vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-4360 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-11940 vulnerabilities

Vulnerabilities for packages: python...

RHSA-2026:39022 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

ROOT-OS-DEBIAN-12-CVE-2025-71088 CVE-2025-71088 in rootio-linux - Patched by Root

Root has patched CVE-2025-71088 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog. The packages did not go after the developers who might install them. The operators used the...

MiracleLinux 9 : nginx:1.26 nginx-1.26.3-9.module+el9+1158+6648e096 (AXSA:2026-1252:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1252:01 advisory. nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 Tenable has extracted the preceding description block directly from the MiracleLinux...