CVE-2026-35070

creationtimestamp| type| source ---|---|--- 2026-05-20 10:50:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbqczmr5u2r...

CVE-2026-47732

creationtimestamp| type| source ---|---|--- 2026-05-20 10:33:02+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpcmjit42m...

CVE-2026-46637

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:39+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpakjssk26...

CVE-2026-46627

creationtimestamp| type| source ---|---|--- 2026-05-20 10:31:26+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpa5zf3m2v...

CVE-2026-46634

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:46+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp6ssob226 2026-07-15 09:34:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqog546kbn2u 2026-07-17 15:18:04+00:00| seen|...

CVE-2026-46635

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:36+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp6odfv62o...

Cross-site Scripting (XSS)

Overview twig/twig is a flexible, fast, and secure template language for PHP. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Twig\Profiler\Dumper\HtmlDumper output rendering logic. An attacker can execute arbitrary HTML or JavaScript by controlling template...

XSS in profiler HtmlDumper via unescaped template and profile names

More info at https://symfony.com/cve-2026-47730...

CVE-2026-24215

creationtimestamp| type| source ---|---|--- 2026-05-20 07:06:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbdran45s2k...

CVE-2026-9057

creationtimestamp| type| source ---|---|--- 2026-05-20 07:01:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbdic7ytg2n...

CVE-2026-7460

creationtimestamp| type| source ---|---|--- 2026-05-20 06:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbd7drwum2c...

CVE-2026-24206

creationtimestamp| type| source ---|---|--- 2026-05-20 06:28:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbbn5bfgr2k 2026-06-17 21:20:37+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mojakrczmn2e...

Astra Linux – Vulnerability in Network-Manager

It was found that nmcli, a command-line interface for NetworkManager, does not honor the 802-1x.ca-path and 802-1x.phase2-ca-path settings when creating a new profile. When a user connects to a network using this profile, authentication does not occur, and the connection is made insecurely...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass profile restrictions through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of “after free” in web searches in Google Chrome before version 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption through profile destruction...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice. PSP is unregistered twice in the following paths: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow under certain conditions:...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Protection was added to the device queue against concurrent access. In the dasdprofilestart function, the number of requests on the device queue is counted. However, access to the device queue is not protected against...

Astra Linux – Vulnerability in bluez

Before version 5.59 of BlueZ, physically nearby attackers could obtain sensitive information because the parameters in the profiles/audio/avrcp.c files were not validated for their length...

Astra Linux – Vulnerability in exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was discovered in Exiv2 versions v0.27.4 and earlier. This infinite loop occurs when Exiv2 is used to print the metadata of a specially crafted image file. A...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: The cleanup of neighbor information has been moved to the profile cleanuptx callback. For IP tunnel encapsulation in ECMP Equal-Cost Multipath mode, since the flow is duplicated to the peer eswitch, the related neighbo...