CVE-2026-46383 Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a...

EUVD-2026-30559

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a...

CVE-2026-46383

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a...

CVE-2026-46383

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a...

OESA-2026-2323 gvfs security update

Gvfs is a userspace virtual filesystem implementation for GIO a library available in GLib. It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security...

PT-2026-41317

Name of the Vulnerable Software and Affected Versions Microsoft APM versions prior to 0.13.0 Description Microsoft APM contains a Windows-specific archive extraction boundary failure affecting users on Python 3.10 and 3.11 runtimes. When the apm install command is provided with a local .tar.gz fi...

UGen: An Agentic Framework for Generating Microarchitectural Attack PoCs

Microarchitectural attacks continue to evolve, uncovering new exploitation vectors in modern processors. From a defensive perspective, assessing a system's susceptibility to such attacks remains challenging. Developing functional attack implementations is labor-intensive, requires deep...

SUSE CVE-2026-43375

In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while the interface is bound to a driver and there is no need to take additional references unless the...

SUSE CVE-2026-43460

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

com.github.psi-probe:psi-probe-tomcat85 (>=3.7.0, <=3.7.1), org.apache.tomcat:tomcat-catalina-ha (8.5.84) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.84)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =3.7.0, =3.7.1 - org.apache.tomcat:tomcat-catalina-h...

com.github.psi-probe:psi-probe-tomcat85 (>=4.1.1, <=4.1.2), org.apache.tomcat:tomcat-catalina-ha (8.5.98) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.98)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.98 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =4.1.1, =4.1.2 - org.apache.tomcat:tomcat-catalina-h...

com.github.psi-probe:psi-probe-tomcat7 (3.0.0), com.github.waffle:waffle-tomcat7 (1.9.0) +5 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.86)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat7 3.0.0 - com.github.waffle:waffle-tomcat7 1.9.0 -...

com.github.psi-probe:psi-probe-tomcat7 (3.5.1), org.apache.tomcat:tomcat-catalina-ant (7.0.105) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.105)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.105 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat7 3.5.1 - org.apache.tomcat:tomcat-catalina-ant 7.0.10...

com.github.psi-probe:psi-probe-tomcat85 (3.5.4), org.apache.tomcat:tomcat-catalina-ha (8.5.64) +5 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.64)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.4 - org.apache.tomcat:tomcat-catalina-ha 8.5.64 ...

com.github.psi-probe:psi-probe-tomcat7 (3.5.3), com.github.waffle:waffle-tomcat7 (3.0.0) +7 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (7.0.107)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.107 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat7 3.5.3 - com.github.waffle:waffle-tomcat7 3.0.0 -...

com.github.psi-probe:psi-probe-core (3.0.0), com.github.psi-probe:psi-probe-tomcat85 (3.0.0) +5 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.30)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-core 3.0.0 - com.github.psi-probe:psi-probe-tomcat85 3.0.0 -...

com.github.psi-probe:psi-probe-tomcat85 (3.5.9), org.apache.tomcat:tomcat-catalina-ha (8.5.79) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.79)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.79 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.9 - org.apache.tomcat:tomcat-catalina-ha 8.5.79 ...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0), com.github.waffle:waffle-tomcat8 (1.9.0) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.51)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0 - com.github.waffle:waffle-tomcat8 1.9.0 -...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0.rc2), ml.alternet:alternet-security-tomcat-8.0 (1.0) +7 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.45)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0.rc2 - ml.alternet:alternet-security-tomcat-8.0...

com.github.psi-probe:psi-probe-tomcat85 (>=4.1.5, <=4.2.0), com.github.waffle:waffle-tomcat85 (3.4.0) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.100)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =4.1.5, =4.2.0 - com.github.waffle:waffle-tomcat85...