CVE-2026-45795 Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server

The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...

CVE-2026-45795

The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...

CVE-2026-45795 Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server

The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...

CVE-2026-45795 Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server

The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...

CVE-2026-3031

Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library. Image::EPEG includes Epeg 0.9.0 that was last updated in 2004. Epeg is a fast JPEG thumbnail library that was once part of the Englightenment Project...

Important: Red Hat Security Advisory: hplip security update

An update for hplip is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

MINI-PPG9-PRJ8-HWC2

Bulletin has no description...

ROOT-APP-NPM-NSWG-ECO-516 NSWG-ECO-516 in @rootio/lodash - Patched by Root

Root has patched NSWG-ECO-516 in the @rootio/lodash package for Root:npm. Multiple fixed versions available...

Important: hplip security update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fixes: HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 For more details about the security issues, including...

CVE-2026-45795: Improper Verification of Cryptographic Signature

The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...

PT-2026-60518

Name of the Vulnerable Software and Affected Versions jans-auth-server versions prior to 2.0.0 Description The jans-auth-server accepts unsigned JWE JSON Web Encryption request objects. This occurs because the JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload...

MAL-2026-10762 Malicious code in @edgecommons/edgecommons (npm)

The @edgecommons/edgecommons package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name uses an '@edgecommons' scope that mimics the internal/private package naming convention of a...

Linux Distros Unpatched Vulnerability : CVE-2026-51105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OPSERVERMESSAGE Handler. CVE-2026-511...

PT-2026-60501

Name of the Vulnerable Software and Affected Versions Image::EPEG versions prior to 0.16 Description Image::EPEG for Perl embeds an unsupported version of the Epeg library, specifically Epeg 0.9.0, which has not been updated since 2004. Epeg is a fast JPEG thumbnail library that was previously pa...

Malicious code in syft-acp-core (npm)

The syft-acp-core package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...

GitLab CE/EE Data Compromise

The vulnerability of the mechanism for displaying commit discussions and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...

RHEL 9 : Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) (RHSA-2026:39808)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39808 advisory. Keystone is a Python implementation of the OpenStack http://www.openstack.org identity service API. Security Fixes: Keystone: OpenStack...

CVE-2026-54492

creationtimestamp| type| source ---|---|--- 2026-07-15 18:35:09+00:00| published-proof-of-concept| https://github.com/koel/koel/security/advisories/GHSA-w79m-f3jx-779v...

CVE-2026-54493

creationtimestamp| type| source ---|---|--- 2026-07-15 18:35:07+00:00| published-proof-of-concept| https://github.com/koel/koel/security/advisories/GHSA-6p96-cfg5-4vhp...

CVE-2026-58660

Kanboard before 1.2.53, fixed in commit 564cc30, BoardAjaxController save method used by the kanban board drag-and-drop endpoint validates the caller's role on the attacker-supplied projectid but never verifies that the supplied taskid actually belongs to that project. Because task identifiers ar...