Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...

glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...

CVE-2026-87023 Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply...

CVE-2026-87023 Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply...

EUVD-2026-74562

Tanium addressed a path traversal vulnerability in Comply...

CVE-2026-87023

Tanium Comply is affected by a path traversal vulnerability that has been addressed by the vendor. The CVSS 3.1 score is 8.5 (HIGH) , with a network attack vector, low complexity, low privileges required, no user interaction, and changed scope —implying the vulnerable component may reside in a di...

CVE-2026-87030 Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply...

CVE-2026-87030 Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply...

EUVD-2026-74552

Tanium addressed a path traversal vulnerability in Comply...

CVE-2026-87030

Tanium Comply is affected by a path traversal vulnerability that Tanium has addressed (see TAN-2026-043 ). The vulnerability is rated CVSS 8.5 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L, indicating a network-exploitable flaw requiring low privileges and no user interaction, with ...

EUVD-2026-74546

Tanium addressed a path traversal vulnerability in Tanium Data Service...

CVE-2026-14505 Tanium addressed a path traversal vulnerability in Tanium Data Service.

Tanium addressed a path traversal vulnerability in Tanium Data Service...

CVE-2026-14505 Tanium addressed a path traversal vulnerability in Tanium Data Service.

Tanium addressed a path traversal vulnerability in Tanium Data Service...

CVE-2026-14505

Tanium Data Service contains a path traversal vulnerability that Tanium has addressed. The vulnerability requires network access , high attack complexity , and high privileges , with no user interaction needed, and can lead to high impact on confidentiality, integrity, and availability. It is rat...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.3.25 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

SUSE CVE-2026-25718

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...

SUSE CVE-2026-28705

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

SUSE CVE-2026-55874

SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy, allowing an authenticated identity scoped to one bucket to read objects from other buckets through server-side...