@0xwork/connect (>=0.1.0, <=0.1.9), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1102 more potentially affected by unknown CVE via tar (>=7.0.0, <=7.5.20)

tar NPM version =7.0.0, =0.1.0, =0.1.8-fix.3, =0.0.6, =11.0.19, =1.0.0, =1.0.2, =1.6.0, =1.1.0, =2026.4.23-zh, =0.1.0, =0.1.1, =0.1.1, =2026.4.4, =2026.4.17 and more Source cves: unknown CVE Source advisory: SNYK:JS-TAR-18319500...

@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +116 more potentially affected by CVE-2026-73562 via mongoose (>=7.0.0, <=7.8.8)

mongoose NPM version =7.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =3.12.0, =1.0.0, =1.0.6-beta.0, =0.2.0-alpha.1, =0.2.0-alpha.0, =0.0.0, =1.0.2, =1.0.0, =7.6.10, =7.8.6 and more Source cves: CVE-2026-73562 Source advisory: OSV:GHSA-664H-WQGQ-64GW...

@0xfutbol/id (>=2.0.0, <=2.0.200), @2060.io/credo-ts-didcomm-media-sharing (>=0.0.5, <=0.1.0) +806 more potentially affected by CVE-2026-59952 via valibot (>=1.0.0, <=1.4.1)

valibot NPM version =1.0.0, =2.0.0, =0.0.5, =0.0.4, =0.0.8, =0.0.12, =0.0.5, =4.3.136-beta.1, =0.10.1, =0.10.1, =0.10.1, =0.10.1, =0.4.0, =0.0.27, =0.1.0, =0.6.0, =0.6.4 and more Source cves: CVE-2026-59952 Source advisory: OSV:GHSA-5QJJ-4XWW-7PHC...

MGASA-2026-0294 Updated libevent packages fix security vulnerabilities

The updated packages fix some security vulnerabilities...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by unknown CVE via @sveltejs/kit (>=2.0.0, <=2.65.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-SVELTEJSKIT-18319512...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by unknown CVE via @sveltejs/kit (>=2.0.0, <=2.65.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-866W-XMHQ-WJ7X...

@alexaegis/svelte-config (>=0.9.2, <=0.15.1), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +19 more potentially affected by unknown CVE via @sveltejs/kit (>=2.0.0, <=2.65.1)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =2.0.0, =0.4.1, =5.0.0-alpha.1, =0.0.1, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WQJV-9729-C5Q2...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-17059 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-17059 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752090...

RHSA-2026:1540 Red Hat Security Advisory: OpenShift Container Platform 4.15.61 packages and security update

Bulletin has no description...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: confluent-kafka, jenkins, solr, druid, neo4j, traccar, spark, apache-hop, spark-fips, kafka, spark-kubernetes-operator, kafka-fips, confluent-kafka-jre-bcfips, spark-kubernetes-operator-fips, solr-fips, apache-hop-fips, apache-jena-fuseki, traccar-fips,...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: confluent-kafka, jenkins, solr, druid, neo4j, traccar, spark, apache-hop, spark-fips, kafka, spark-kubernetes-operator, kafka-fips, confluent-kafka-jre-bcfips, spark-kubernetes-operator-fips, solr-fips, apache-hop-fips, apache-jena-fuseki, traccar-fips,...

Critical Photon OS Security Update - PHSA-2026-5.0-90-0929

Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-0929

Updates of 'libmicrohttpd', 'rubygem-concurrent-ruby' packages of Photon OS have been released...

Debian dla-4696 : imagemagick - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4696 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4696-1 [email protected]...

Photon OS 5.0: Nasm PHSA-2026-5.0-0925

An update of the nasm package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0925. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-16796

The vulnerability CVE-2026-16796 affects the AWS Bedrock AgentCore Python SDK install_packages() function; due to improper neutralization of argument delimiters, a remote authenticated user could execute arbitrary commands within the Code Interpreter sandbox when using SDK versions before 1.18.1....

CVE-2026-16796

Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...

CVE-2026-16796 Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...

CVE-2026-16796 Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +54 more potentially affected by CVE-2026-73419 via next-auth (>=4.0.0-beta.6, <=4.24.13)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =5.1.0 and more Source cves: CVE-2026-73419 Source advisory: OSV:GHSA-X445-F3H2-J279...