com.vaadin:vaadin (>=24.5.0, <=24.7.15), com.vaadin:vaadin-charts-flow-svg-generator (>=24.5.0, <=24.7.14) +8 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin-charts-flow (>=24.5.0, <=24.7.14)

com.vaadin:vaadin-charts-flow MAVEN version =24.5.0, =24.5.0, =24.5.0, =24.5.0, =24.5.0, =24.5.0, =24.5.0, =24.7.14 - com.vaadin:vaadin-testbench-unit 9.3.15 - com.vaadin:vaadin-testbench-unit-junit5 9.3.15 - com.vaadin:vaadin-testbench-unit-quarkus 9.3.15 - com.vaadin:vaadin-testbench-unit-share...

com.vaadin:vaadin-jandex (>=24.10.0, <=24.10.10), com.vaadin:vaadin-platform-javadoc (>=24.10.0, <=24.10.10) +5 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=24.10.0, <=24.10.10)

com.vaadin:vaadin MAVEN version =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.3 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-107588 Source advisory: SNYK:JAVA-COMVAADIN-21691577...

com.vaadin:vaadin-jandex (>=22.0.0, <=23.6.15), com.vaadin:vaadin-platform-javadoc (>=22.0.0, <=23.6.15) +76 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=22.0.0, <=23.6.15)

com.vaadin:vaadin MAVEN version =22.0.0, =22.0.0, =22.0.0, =8.3.1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.4 and more Source cves: CVE-2026-107588 Source advisory: SNYK:JAVA-COMVAADIN-21691577...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.22), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.22) +4 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=24.8.0, <=24.9.22)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.8 Source cves: CVE-2026-107588 Source advisory: SNYK:JAVA-COMVAADIN-21691577...

com.vaadin:vaadin (>=24.10.0, <=24.10.10), com.vaadin:vaadin-charts-flow-svg-generator (>=24.10.0, <=24.10.10) +9 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin-charts-flow (>=24.10.0, <=24.10.10)

com.vaadin:vaadin-charts-flow MAVEN version =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.3 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-107588 Source advisory: SNYK:JAVA-COMVAADIN-2169157...

com.vaadin:vaadin (>=22.0.0, <=23.6.15), com.vaadin:vaadin-charts-flow-demo (>=22.0.0, <=23.0.16) +80 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin-charts-flow (>=22.0.0, <=23.6.15)

com.vaadin:vaadin-charts-flow MAVEN version =22.0.0, =22.0.0, =22.0.0, =22.0.0, =22.0.0, =22.0.0, =8.3.1, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.4 and more Source cves: CVE-2026-107588 Source advisory: SNYK:JAVA-COMVAADIN-21691578...

com.vaadin:vaadin-jandex (>=24.5.0, <=24.7.15), com.vaadin:vaadin-platform-javadoc (>=24.5.0, <=24.7.15) +4 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=24.5.0, <=24.7.15)

com.vaadin:vaadin MAVEN version =24.5.0, =24.5.0, =24.5.0, =24.7.15 - com.vaadin:vaadin-testbench-unit 9.3.15 - com.vaadin:vaadin-testbench-unit-junit5 9.3.15 - com.vaadin:vaadin-testbench-unit-quarkus 9.3.15 - com.vaadin:vaadin-testbench-unit-shared 9.3.15 Source cves: CVE-2026-107588 Source...

com.vaadin:vaadin-platform-javadoc (25.3.0), com.wontlost:zxing-vaadin (4.0.0) potentially affected by CVE-2026-107588 via com.vaadin:vaadin (25.3.0)

com.vaadin:vaadin MAVEN version 25.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-javadoc 25.3.0 - com.wontlost:zxing-vaadin 4.0.0 Source cves: CVE-2026-107588 Source advisory:...

CVE-2026-113002

A flaw was found in chromium-browser. A memory corruption vulnerability in the Transactions Platform allows a remote attacker to achieve information disclosure by convincing a user to open a crafted HTML page. This issue enables the attacker to read memory contents within the browser sandbox, an...

CVE-2026-113008

A flaw was found in the Transactions Platform in Google Chrome. A remote attacker can exploit this memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the browser's restricted...

aieng-platform-onboard (>=0.5.0, <=0.7.5), autodocgenerator (>=0.5.1, <=1.6.6.8) +10 more potentially affected by CVE-2026-113726 via virtualenv (20.36.1)

virtualenv PYPI version 20.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aieng-platform-onboard =0.5.0, =0.5.1, =1.1.0.dev20260322010408, =0.0.0, =2.2.9, =0.5.0, =1.0.0, =1.0.0b2, =1.1.0, =1.2.0 - waldiez-runner...

SUSE CVE-2026-113002

Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-113008

Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-113115

Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-113141

Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-113298

Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Critical: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

CVE-2026-114463

The webhook platform gateway in Nous Research Hermes Agent versions builds the session chatid as webhook:routename:deliveryid and re-derives the authorizing route by splitting that string, so a route name containing a ":" resolves toolset authorization to a different, higher-privileged prefix rou...

Critical: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

CLSA-2026-1792595229 TuxCare security update for @react-native-community/cli-platform-android (1 CVE)

TuxCare rebuilt @react-native-community/cli-platform-android to address 1 CVE. Fixed in 13.5.1-tuxcare.1...