PT-2026-72195

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5 st idx data on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak one struct mlx5 st idx data per cycle; kmemleak flags it as...

Malicious code in wct-st (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3065a54d66ae4872334224443453c85f98c9ab8ae9d87df215bb51a5ba5e7595 On npm install, the package's postinstall lifecycle script collects installer host identifiers hostname, platform, architecture, Node.js version,...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the --partial-dir or --backup-dir options when symlinks exist within the module file tree. An attacker can write files outside the intended directory by placing or exploiting a symlink under the module root,...

Eval Injection

Overview @faker-js/faker is a Generate massive amounts of fake contextual data Affected versions of this package are vulnerable to Eval Injection via the helpers.fake function. An attacker can execute arbitrary JavaScript code by supplying specially crafted templates that access the Function...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the construction of HTTP request URLs due to unescaped variable path components. An attacker can manipulate the URL to access unintended API endpoints or resources by supplying specially crafted repository or...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the construction of HTTP request URLs due to unescaped variable path components. An attacker can manipulate the URL to access unintended API endpoints or resources by supplying specially crafted repository or...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the construction of HTTP request URLs due to unescaped variable path components. An attacker can manipulate the URL to access unintended API endpoints or resources by supplying specially crafted repository or...

CVE-2026-63967

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix stack leak in tagged FIFO buffer The tagged FIFO path declares iiobuff on the stack with aligned8 but no initializer, but there is a hole in the structure, which will then leak to userspace as...

CVE-2026-63932: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: mhz19b: reject oversized serial replies mhz19breceivebuf appends each serdev chunk into the fixed MHZ19BCMDSIZE receive buffer and advances bufidx by len without checking that the chunk fits in the remaining space....

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via a crafted download request. An attacker can access arbitrary files accessible to the operating system account running the server by exploiting insufficient validation of user-supplied paths. Note: This is only...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via a crafted download request. An attacker can access arbitrary files accessible to the operating system account running the server by exploiting insufficient validation of user-supplied paths. Note: This is only...

UBUNTU-CVE-2026-57432

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in Smeasurestruct leading to an out-of-bounds heap read in pack and unpack. Smeasurestruct adds each item's size times its repeat count to a running total with no overflow check, so...

MAL-2026-6880 Malicious code in st-biginteger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f459f75f70d08e36cca4b9dc35ee7c90cb7010de9b77a4906444bebf174b013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6881 Malicious code in st-bigintr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e131cc31d56a484cba011c6188111c73f142866cfde721737180ce53cc3f96d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-61023

A flaw was found in virtuoso-opensource. An attacker could exploit a vulnerability in the stcompare component by sending specially crafted SQL statements. This could lead to a Denial of Service DoS, making the service unavailable to legitimate users...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: Fix for iiochanspec for sensors without event detection. The stlsm6dsxaccchannels array within struct iiochanspec contains a eventspec field that is not NULL, indicating that the sensor supports IIO events...

CVE-2025-61023

An issue in the stcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

PT-2026-51542

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description A flaw in the st compare component allows attackers to trigger a Denial of Service DoS by using specially crafted SQL statements. Recommendations At the moment, there is no information...

CVE-2025-61023

An issue in the stcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2025-61023

A vulnerability exists in the st_compare component of openlink virtuoso-opensource v7.2.11 . Attackers can exploit this flaw by sending specially crafted SQL statements to trigger a Denial of Service (DoS) , which can make the service unavailable to legitimate users. While some Linux distribution...