RockyLinux 8 : python3 (RLSA-2026:39320)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39320 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

AlmaLinux 8 : python3 (ALSA-2026:39320)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39320 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...

Oracle Linux 10 : glibc (ELSA-2026-19061)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19061 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...

Oracle Linux 7 : 389-ds-base (ELSA-2026-26453)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26453 advisory. - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-14905 Orabug: 39146844 Tenable has extracted the preceding description block...

GHSA-G345-7JG6-M22P vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-4360 vulnerabilities

Vulnerabilities for packages: python...

GHSA-WQXF-PJXH-HH4H vulnerabilities

Vulnerabilities for packages: python...

GHSA-GF2W-JQMQ-FCM8 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-0864 vulnerabilities

Vulnerabilities for packages: python...

GHSA-9MC4-RQMQ-H467 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-11972 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-59871 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, saf, homepage, npm...

CVE-2026-4360 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-11940 vulnerabilities

Vulnerabilities for packages: python...

GHSA-G345-7JG6-M22P vulnerabilities

Vulnerabilities for packages: python...

RHSA-2026:39022 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog. The packages did not go after the developers who might install them. The operators used the...

Important Photon OS Security Update - PHSA-2026-4.0-1056

Updates of 'podman' packages of Photon OS have been released...

PT-2026-58901

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...

RockyLinux 9 : xorg-x11-server (RLSA-2026:38486)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38486 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the RockyLin...