Updated python-starlette package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Proxy-Authorization header kept across hosts. CVE-2024-28849 Starlette vulnerable to On^2 DoS via Range header merging in starlette.responses.FileResponse. CVE-2025-62727 Security restriction bypass via malformed HTTP Host header. CVE-2026-48710...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: grype, goreleaser, syft, flux-source-controller, kubescape, bom, gitlab-runner, xeol, tfsec, trivy, gptscript, scorecard, pulumi, flux, rancher-fleet, gitsign, nuclei, gitaly, gitea, grafana-alloy, crossplane, pulumi-language-dotnet, boring-registry, dagger, snyk-cli...

Debian dla-4724 : ata-modules-6.12.100+deb12-armmp-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4724 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4724-1 [email protected]...

Debian dsa-6418 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6418 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6418-1 [email protected] https://www.debian.org/securit...

GHSA-P538-C434-8V24 vulnerabilities

Vulnerabilities for packages: mlflow, awx, jupyter-all-spark-notebook...

GHSA-R8H2-QPFX-MX59 vulnerabilities

Vulnerabilities for packages: metabase...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHSA-2026:51064 Red Hat Security Advisory: pipewire security update

Bulletin has no description...

GHSA-QRQ2-C54W-WGQM vulnerabilities

Vulnerabilities for packages: nodejs...

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix various security issues. See the links to get complete information of each issue...

Updated rootcerts, nss & firefox packages fix security vulnerabilities

Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one...

OESA-2026-3268 libevent security update

Libevent additionally provides a sophisticated framework for buffered network IO, with support for sockets, filters, rate-limiting, SSL, zero-copy file transmission, and IOCP. Libevent includes support for several useful protocols, including DNS, HTTP, and a minimal RPC framewor. Security Fixes:...

Cisco Catalyst SD-WAN Software Security Hardening (cisco-sa-hardening-sdwan-faLcR3K)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco Catalyst SD-WAN Software could allow an authenticated, remote attacker to conduct path traversal attacks, gain unauthorized access, or cause a denial ...

libwireshark19-4.6.7-3.1 on GA media (moderate)

libwireshark19-4.6.7-3.1 on GA media Announcement ID: openSUSE-SU-2026:11460-1 Rating: moderate Cross-References: CVE-2026-15163 CVE-2026-15164 CVE-2026-15165 CVE-2026-15166 CVE-2026-15167 CVE-2026-15168 CVE-2026-15169 CVE-2026-15170 CVE-2026-15171 CVE-2026-15172 CVE-2026-15173 CVE-2026-15174...

CVE-2026-12074 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

Security Bulletin: Cyber Fraud includes components with multiple known vulnerabilities

Summary Cyber Fraud includes components with known vulnerabilities. These have been addressed in the update. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test and...

Important: Red Hat Security Advisory: libXfont2 security update

An update for libXfont2 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

SUSE-SU-2026:3520-1 Security update for nodejs24

This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks bsc1272882. - CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits...

CVE-2026-64534

creationtimestamp| type| source ---|---|--- 2026-08-06 05:15:59+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-64365

creationtimestamp| type| source ---|---|--- 2026-08-06 04:50:14+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01...