CVE-2024-25039 IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive...

SUSE CVE-2026-44454

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30.2, the dotfiles registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a craft...

SUSE CVE-2026-44849

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer enforces seven EndpointSecuritySettings restrictions that...

SUSE CVE-2026-54158

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view database cell renderer genAVValueHTML interpolates cell content raw in four of its branches: text, url, phone, and mAsset. A cell value like or " breaks out of its surrounding tag and runs arbitrary...

JLSEC-2026-867

In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c...

JLSEC-2026-888

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality...

JLSEC-2026-1032 ImageMagick: Memory Leak in wand option parser when providing invalid arguments

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...

CVE-2026-14522

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters...

CVE-2026-6540 L7 policy bypass via unnormalized HTTP path matching

Calico's Application Layer Policy disabled by default, which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes...

OPENSUSE-SU-2026:21487-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Oth...

CVE-2026-14266

A flaw was found in 7-Zip. This vulnerability allows a remote attacker to execute arbitrary code on affected installations. Exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a malicious web page. The flaw occurs during the processing of...

CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-KF63745 Security fixes in kapp-controller-fips 0.59.0-r2

Package kapp-controller-fips version 0.59.0-r2 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...

CLEANSTART-2026-OG65548 Security fixes in eks-distro-kube-scheduler 1.35.2-r0

Package eks-distro-kube-scheduler version 1.35.2-r0 fixes 7 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39821, CVE-2026-33814, CVE-2026-33186...

CLEANSTART-2026-SN26576 Security fixes in mongosh 2.6.0-r1

Package mongosh version 2.6.0-r1 fixes 7 vulnerabilities: ghsa-pfrx-2q88-qq97, ghsa-rc47-6667-2j5j, ghsa-fj3w-jwp8-x2g3, CVE-2025-25285, ghsa-rmvr-2pp2-xj38...

CLEANSTART-2026-AI73891 Security fixes in kubernetes-csi-external-provisioner-fips 6.1.0-r0

Package kubernetes-csi-external-provisioner-fips version 6.1.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2025-61730, CVE-2025-61726...

CLEANSTART-2026-YW71303 Security fixes in harbor 2.13.5-r0

Package harbor version 2.13.5-r0 fixes 7 vulnerabilities: CVE-2025-68121, CVE-2021-3538, CVE-2026-27139, CVE-2025-29923, CVE-2026-27142...

CLEANSTART-2026-XL50286 Security fixes in hubble-ui 0.13.3-r1

Package hubble-ui version 0.13.3-r1 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, CVE-2025-58190...

CLEANSTART-2026-FP73805 Security fixes in trillian 1.7.2-r1

Package trillian version 1.7.2-r1 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27138, CVE-2026-27137, CVE-2026-27139...

CLEANSTART-2026-BL43584 Security fixes in prometheus-redis-exporter-fips 1.80.0-r0

Package prometheus-redis-exporter-fips version 1.80.0-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-68119, CVE-2025-61728, CVE-2025-68121, CVE-2025-61731...