ROOT-OS-ALPINE-317-CVE-2026-9076 CVE-2026-9076 in openssl - Patched by Root

Root has patched CVE-2026-9076 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...

ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root

Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-databind jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515 reported for jackson-databind-2.17.1.jar Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.56 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

ROOT-APP-NPM-NSWG-ECO-17 NSWG-ECO-17 in jsonwebtoken - Patched by Root

Root has patched NSWG-ECO-17 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

CVE-2026-17784 vulnerabilities

Vulnerabilities for packages: chromium...

MiracleLinux 8 : java-17-openjdk-17.0.20.0.8-1.1.el8 (AXSA:2026-1403:11)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1403:11 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...

CVE-2026-15830

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...

CLSA-2026-1784683085 TuxCare security update for jsonwebtoken (17 CVEs)

TuxCare rebuilt jsonwebtoken to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1776213252 TuxCare security update for svelte (17 CVEs)

TuxCare rebuilt svelte to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1775089657 TuxCare security update for shelljs (17 CVEs)

TuxCare rebuilt shelljs to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1774570927 TuxCare security update for color-string (17 CVEs)

TuxCare rebuilt color-string to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1773360975 TuxCare security update for ms (17 CVEs)

TuxCare rebuilt ms to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1773274561 TuxCare security update for tunnel-agent (17 CVEs)

TuxCare rebuilt tunnel-agent to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1771805410 TuxCare security update for fresh (17 CVEs)

TuxCare rebuilt fresh to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...

Amazon Linux 2 : java-17-amazon-corretto, --advisory ALAS2-2026-3842 (ALAS-2026-3842)

The version of java-17-amazon-corretto installed on the remote host is prior to 17.0.20+8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3842 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product...

Amazon Linux 2023 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2023-2026-2022)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2022 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java S...

EUVD-2026-36574

sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes...

CVE-2026-62999

Copier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, percent-encoded parent-directory segments or encoded path separators in a template URL can match a configured trusted repository prefix before an HTTP server or Git transport decodes the path, allowing...

CVE-2026-62999 Copier: Percent-encoded dot segments in template URLs can allow trusted-prefix escape (Incomplete fix for trust-prefix bypass)

Copier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, percent-encoded parent-directory segments or encoded path separators in a template URL can match a configured trusted repository prefix before an HTTP server or Git transport decodes the path, allowing...