CVE-2026-41423 Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper...

CVE-2026-41423 Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper...

CVE-2026-41423 Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper...

CVE-2026-41161 Username Enumeration via Timing Attack

Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint contains a logic flaw that allows unauthenticated remote attackers to enumerate valid usernames by measuring the application's response time...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.89 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.89 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

CVE-2026-34354: Guardicore Local Privilege Escalation Vulnerability

Read the technical details of a security vulnerability CVE-2026-34354 in Akamai Guardicore Platform Agent for Windows — and get clear guidance on mitigation...

GHSA-MJ4R-2HFC-F8P6 vulnerabilities

Vulnerabilities for packages: keycloak, sonarqube, apache-activemq-artemis, opensearch, strimzi-kafka-operator, zipkin, cassandra, akhq, trino, kserve-modelmesh, logstash, selenium, apache-pulsar, tez, celeborn, apache-nifi-registry, wavefront-proxy, druid, infinispan, apicurio-registry, neo4j,...

GHSA-Q2QQ-HMJ6-3WPP vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, deno, vector, ztunnel, shadowsocks-rust...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: keycloak, sonarqube, apache-activemq-artemis, opensearch, strimzi-kafka-operator, zipkin, akhq, trino, kserve-modelmesh, logstash, selenium, apache-pulsar, tez, celeborn, apache-nifi-registry, wavefront-proxy, druid, infinispan, apicurio-registry, neo4j, flyway,...

GHSA-HF2P-G3JQ-W2MX vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-aws, linux-azure, linux-vmware...

GHSA-P5WW-JRFV-82QX vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-qemu-rc, linux-aws, linux-azure, linux-vmware...

CVE-2026-31696 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-qemu-rc, linux-aws, linux-azure, linux-vmware...

GHSA-P3HW-MV63-RF9W vulnerabilities

Vulnerabilities for packages: codex, jujutsu, cargo-c, cargo-audit...

GHSA-PG4W-G64P-QWHJ vulnerabilities

Vulnerabilities for packages: codex, jujutsu, cargo-c, cargo-audit...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Lodash

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Lodash. CVE-2026-2950, CVE-2026-4800 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-2950 DESCRIPTION: Impact: Lodash versions 4.17.23 and...

CVE-2024-46507

A SSTI server side template injection vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server...

CVE-2024-46508

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed by setting YETIAUTHSECRETKEY to a value other than SECRET...

CVE-2026-8149 GCM chunking can lead to bad tag exception on decryption

A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X8664, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X8664, AVX, AVX-512f. This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C. This issue affects...

CVE-2026-8149 GCM chunking can lead to bad tag exception on decryption

A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X8664, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X8664, AVX, AVX-512f. This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C. This issue affects...

BIT-JRE-2026-21947

Vulnerability in Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u471-b50. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...