GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, confluent-kafka-jre-bcfips, apache-activemq, knative-kafka-broker-fips, infinispan, ruby3.2-jrjackson, wavefront-proxy, spark-fips, flyway, cassandra-fips, hono, sonarqube, elasticsearch-fips, nacos-docker, pinot, ruby3.3-jrjackson,...

GHSA-H95V-H523-3MW8 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, dagger, crossplane-provider-azure-storage, crossplane-provider-aws-memorydb, crossplane-provider-aws-dynamodb, gptscript, crossplane-provider-aws-sns, crossplane-provider-aws-iam, crossplane-provider-aws-cloudformation,...

CGA-8442-G77C-HXG9

Bulletin has no description...

CGA-3256-XP3Q-CGWQ

Bulletin has no description...

CGA-7JG2-PM78-2HCH

Bulletin has no description...

CGA-2HPM-FPRQ-JJF4

Bulletin has no description...

CGA-5V8H-MF2H-RJCW

Bulletin has no description...

CGA-2C64-QH7J-V4WC

Bulletin has no description...

CGA-3QQC-9PGR-V3GQ

Bulletin has no description...

CGA-3GW4-Q932-824C

Bulletin has no description...

GHSA-MVH2-CRG5-V77C

creationtimestamp| type| source ---|---|--- 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-23 00:00:22+00:00| seen| https://t.me/bdufstecru/3334...

GHSA-C35G-MGC3-95RX

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

GHSA-M5FR-RV3H-XG2R

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

GHSA-537C-GMF6-5CCF

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

DEBIAN-CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

DEBIAN-CVE-2026-50251

In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled set to any value greater than zero, glue records of 0.0.0.0/::0 can short-circuit Unbound, on systems that can direct such traffic, by issuing DNS queries and receiving seemingly unwanted replies...

UBUNTU-CVE-2026-52863

In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that could lead to memory corruption if the owner of the original view name is jostled out when Unbound is under pressure...

Moderate: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabilit...

Incorrect Authorization

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Incorrect Authorization in the GraphQL node when the "Allowed HTTP Request Domains" restriction is not enforced on HTTP-based credentials. An attacker can access restricted credentials by configurin...