EUVD-2026-53916

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

@holocronlab/botruntime-adk (2.5.4), @holocronlab/brt (0.9.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.5.4)

@holocronlab/botruntime-runtime NPM version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.5.4 - @holocronlab/brt 0.9.3 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (>=2.0.10, <=2.9.7), @holocronlab/brt (>=0.5.8, <=0.12.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.9.7)

@holocronlab/botruntime-runtime NPM version 2.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk =2.0.10, =0.5.8, =0.12.3 Source cves: unknown CVE Source advisory:...

@holocronlab/botruntime-adk (2.2.7), @holocronlab/brt (0.7.7) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.2.7)

@holocronlab/botruntime-runtime NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.2.7 - @holocronlab/brt 0.7.7 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.4.2), @holocronlab/brt (0.7.25) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.4.2)

@holocronlab/botruntime-runtime NPM version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.4.2 - @holocronlab/brt 0.7.25 Source cves: unknown CVE Source advisor...

@holocronlab/botruntime-adk (2.6.1), @holocronlab/brt (0.9.5) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.1)

@holocronlab/botruntime-runtime NPM version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.1 - @holocronlab/brt 0.9.5 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.2.5), @holocronlab/brt (0.7.5) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.2.5)

@holocronlab/botruntime-runtime NPM version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.2.5 - @holocronlab/brt 0.7.5 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.6.3), @holocronlab/brt (0.9.7) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.3)

@holocronlab/botruntime-runtime NPM version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.3 - @holocronlab/brt 0.9.7 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.6.4), @holocronlab/brt (0.9.8) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.4)

@holocronlab/botruntime-runtime NPM version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.4 - @holocronlab/brt 0.9.8 Source cves: unknown CVE Source advisory...

Malicious code in @vanexalabs-ai/vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5de2359eef117d1f491dc2c8628e56d866435912bd6f8e55a10eee8e7a9a6c The package implements a daemon that pairs with a remote peer phone over WebRTC, using https://vanexa-agent-relay.workers.dev and...

MAL-2026-13397 Malicious code in @vanexalabs-ai/vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5de2359eef117d1f491dc2c8628e56d866435912bd6f8e55a10eee8e7a9a6c The package implements a daemon that pairs with a remote peer phone over WebRTC, using https://vanexa-agent-relay.workers.dev and...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: Fixed a issue where partial COW operations by pedit led to corruption of the page cache. tcfpeditact calculates the COW range for skbensurewritable once before the key loop, using tcfpoffmaxhint. However, this hint...

DEBIAN-CVE-2026-67869

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against runtime-resolved InputArguments metadata...

PT-2026-68522

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.6.0 through 1.6.3 Description A heap-based buffer overflow occurs in the redis client of the Apache Portable Runtime Utility. A heap-based buffer overflow is a memory corruption issue that happens whe...

Oracle Linux 10 : kernel (ELSA-2026-30129)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-30129 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Linux Distros Unpatched Vulnerability : CVE-2026-34502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0...

RHEL 9 : RHEL AI 3.3 RPM runtime CVE fix - aom (Important) (RHSA-2026:51100)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51100 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

PT-2026-68521

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.6.0 through 1.6.3 Description An SQL Injection issue exists in the apr dbd oracle provider. This occurs due to the improper neutralization of special elements used in an SQL command, which could allow...

RockyLinux 8 : kernel-rt (RLSA-2026:49851)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:49851 advisory. kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: Rocky Linux8.10 - KVM: s390: Limit adapter indicator access...