CVE-2026-15028 affecting package libarchive for versions less than 3.7.7-7

CVE-2026-15028 affecting package libarchive for versions less than 3.7.7-7. A patched version of the package is available...

CVE-2026-58389 affecting package thrift for versions less than 0.24.0-1

CVE-2026-58389 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56847 affecting package nodejs for versions less than 24.18.1-1

CVE-2026-56847 affecting package nodejs for versions less than 24.18.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56850 affecting package nodejs for versions less than 24.18.1-1

CVE-2026-56850 affecting package nodejs for versions less than 24.18.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1

CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-7260 affecting package php for versions less than 8.3.33-1

CVE-2026-7260 affecting package php for versions less than 8.3.33-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55971 affecting package thrift for versions less than 0.24.0-1

CVE-2026-55971 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-32597 affecting package python-jwt for versions less than 2.13.0-1

CVE-2026-32597 affecting package python-jwt for versions less than 2.13.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55968 affecting package thrift for versions less than 0.24.0-1

CVE-2026-55968 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1

CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-48586 affecting package thrift for versions less than 0.24.0-1

CVE-2026-48586 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-51283

creationtimestamp| type| source ---|---|--- 2026-08-01 03:33:41+00:00| seen| https://gist.github.com/programmervuln/c1fea9d3513e8eedf6c3884dbaa9edc4...

CVE-2026-53573

creationtimestamp| type| source ---|---|--- 2026-08-01 02:31:13+00:00| seen| https://gist.github.com/alon710/32cccaf1dfa9c1c40b850f71e29f1c0f...

GHSA-72PG-X5F8-J25J vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

CVE-2026-51278

creationtimestamp| type| source ---|---|--- 2026-08-01 01:47:41+00:00| seen| https://gist.github.com/programmervuln/775a517ba93b83b4a76bd1fd2193ed82...

EUVD-2026-51669

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21494-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21494-1 advisory. Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version...

GHSA-C5PX-58J2-7FQP gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

Summary consultgeminiwithfiles in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip and...

CVE-2026-52134

An issue in the parseGoosePayload function /goose/goosereceiver.c of libiec61850 v1.6 allows attackers to bypass authentication via a captured GOOSE frame...

CVE-2026-54787

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...