ROOT-APP-NPM-CVE-2026-44005 CVE-2026-44005 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-44005 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-32313 CVE-2023-32313 in @rootio/vm2 - Patched by Root

Root has patched CVE-2023-32313 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

CLEANSTART-2026-GN31514 Security fixes for CVE-2026-42504 applied in versions: 3.3.31-r0

Security vulnerability affects the newrelic-infrastructure-bundle package. This issue is resolved in later releases. See references for vulnerability details...

OPENSUSE-SU-2026:21388-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

CLEANSTART-2026-ID74762 Security fixes for CVE-2026-41080, CVE-2026-45186 applied in versions: 2.35.9-r1, 2.35.9-r2

Multiple security vulnerabilities affect the aws-cli package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC64135 Security fixes for CVE-2020-11100 applied in versions: 2.1.4-r0

Security vulnerability affects the haproxy package. This issue is resolved in later releases. See references for vulnerability details...

RHEL 8 : kernel (RHSA-2026:42552)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42552 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/mana: Remove user...

Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 For more details about the security issues, including the impact, a CVSS...

GHSA-F48W-9M4C-M7F5 Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

Summary The fix for CVE-2026-54298 GHSA-jrpj-wcv7-9fh9 added an INVALIDATTRNAMECHAR guard to addAttribute so that spread-prop attribute names containing "' /= or whitespace are dropped. A second attribute-rendering path, renderHTMLElement in packages/astro/src/runtime/server/render/dom.ts, has it...

EUVD-2026-44708

File Browser: Colliding username normalization gives two users the same home directory...

CVE-2026-55550

NextCRM is open-source customer relationship management CRM software. The CRM product catalog is an organization-wide business object. Normal application server actions restrict product creation, update, and deletion to manager and admin roles. However, in version 0.12.1, the MCP product tools...

EUVD-2026-44707

File Browser: Archive builder turns backslash filenames into path traversal zip-slip...

EUVD-2026-42363

Composer: URL-embedded HTTP-Basic username leaks to verbose logs GitHub PAT exposure...

EUVD-2026-42303

node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records...

EUVD-2026-44670

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests...

CVE-2026-55550

NextCRM is open-source customer relationship management CRM software. The CRM product catalog is an organization-wide business object. Normal application server actions restrict product creation, update, and deletion to manager and admin roles. However, in version 0.12.1, the MCP product tools...

CVE-2026-56623 Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows

Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. A git server implemented with Apache MINA SSHD component sshd-git and running on Windows could allow an authenticated remote user access to git repositories...

CVE-2026-44230 RT: Reflected Cross-Site Scripting in search results chart

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...

EUVD-2026-41925

vLLM denial of service via prompt embeds on M-RoPE models...

MGASA-2026-0277 Updated xmlstarlet package fixes a security vulnerability

The updated package fixes a security vulnerability: XML external entity vulnerability. References: https://lists.fedoraproject.org/archives/list/[email protected] oraproject.org/message/KDR5XRMVBCDZ4HWDCGLKDVKGSCWACG33/...