Linux Distros Unpatched Vulnerability : CVE-2026-64446

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix heap buffer overflow in rtwcfg80211setwpaie supplicantie is a 256-byte array in struct securitypriv. The WPA and WPA2 IE copy paths use...

Linux Distros Unpatched Vulnerability : CVE-2026-55868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SRT project reports: CVE-2026-55868 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2026-26197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's siz...

Linux Distros Unpatched Vulnerability : CVE-2026-16379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-64310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process...

Linux Distros Unpatched Vulnerability : CVE-2026-16387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Linux Distros Unpatched Vulnerability : CVE-2026-16380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16380 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-64299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily NUL- terminated, so the filter predicate functions filterpredstring...

Linux Distros Unpatched Vulnerability : CVE-2026-16413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform ...

Linux Distros Unpatched Vulnerability : CVE-2026-16391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-16398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16398 Note that Nessus relies on the...

GHSA-J6G5-3HH3-PGW8 AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

Summary The AWS Bedrock AgentCore Python SDK bedrock-agentcore provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73411 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73411 Source advisory: OSV:GHSA-Q53C-4PRM-W95Q...

GHSA-7QJ2-Q5C8-CXX5 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-59892 vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, langfuse-fips, langfuse, librechat, cadence-web...

GHSA-7QJ2-Q5C8-CXX5 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-15308 vulnerabilities

Vulnerabilities for packages: python...

@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.5), @aaravpos/appointment-booking-plugin (>=1.0.1, <=7.0.6) +271 more potentially affected by unknown CVE via react-router (>=7.12.0, <=7.18.1)

react-router NPM version =7.12.0, =1.0.0, =1.0.1, =0.0.9-alpha-20260107202750-16b04dcbaa92c7fc2bbb580dbc1da723c76a5225, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...

@appigram/react-code-split-ssr (>=2.1.0, <=2.1.2), @ariestools/sdk-react-crypto (>=11.1.1, <=11.1.5) +28 more potentially affected by unknown CVE via react-router (>=8.0.0-pre.1, <=8.2.0)

react-router NPM version =8.0.0-pre.1, =2.1.0, =11.1.1, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0, =3.4.0-ultramodern.0,...

@darthcav/ts-http-server (0.9.1), @digitalpaws/starr (0.0.2) +4 more potentially affected by CVE-2026-7120 via @fastify/static (10.1.0)

@fastify/static NPM version 10.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/static and may be impacted: - @darthcav/ts-http-server 0.9.1 - @digitalpaws/starr 0.0.2 - @node-cli/static-server =3.1.17, =9.0.0-canary.19, =9.0.2 Source cves:...