GHSA-X2WV-9P67-MH9W vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-PJWM-PJ3P-43MV vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, opensearch-dashboards, prism, langfuse, jitsucom-jitsu, kubeflow-centraldashboard...

GHSA-654M-C8P4-X5FP vulnerabilities

Vulnerabilities for packages: lerna, opensearch-dashboards, prism, langfuse, jitsucom-jitsu, kubeflow-centraldashboard...

GHSA-898C-Q2CR-XWHG vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, opensearch-dashboards, prism, langfuse, kubeflow-katib, jitsucom-jitsu, kubeflow-centraldashboard...

SUSE CVE-2026-48711

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...

GHSA-X2WV-9P67-MH9W vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35371 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35352 vulnerabilities

Vulnerabilities for packages: uutils...

[SECURITY] Fedora 44 Update: dovecot-2.4.4-1.fc44

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

CVE-2026-41438

hw/uefi: add namesize check to uefivarsmmlockvariable...

Linux Distros Unpatched Vulnerability : CVE-2026-48827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload- pack, git-receive-pack, and other git operations allows...

CVE-2026-41437

hw/uefi: fix ucs2 string helper functions...

Linux Distros Unpatched Vulnerability : CVE-2025-60485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A segmentation violation in the gfisomapplesettagex function /isomedia/isomwrite.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of...

GHSA-5V4G-VW9X-H534 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-Q6M9-XJ2W-XMRC vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-898C-Q2CR-XWHG vulnerabilities

Vulnerabilities for packages: redisinsight, unleash, kibana, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, kubeflow-centraldashboard, langfuse, prism, lerna, jitsucom-jitsu, gitlab-rails-ce, librechat, opensearch-dashboards-fips, wazuh-dashboard, kubeflow-katib, opensearch-dashboards, aw...

CVE-2026-44492 vulnerabilities

Vulnerabilities for packages: redisinsight, airflow, unleash, kibana, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, kubeflow-centraldashboard, langfuse, airflow-core, prism, lerna, jitsucom-jitsu, gitlab-rails-ce, librechat, opensearch-dashboards-fips, wazuh-dashboard,...

GHSA-35JP-WW65-95WH vulnerabilities

Vulnerabilities for packages: redisinsight, unleash, kibana, langfuse-fips, wazuh-dashboard-fips, nextcloud-server, kubeflow-centraldashboard, langfuse, prism, lerna, jitsucom-jitsu, gitlab-rails-ce, librechat, opensearch-dashboards-fips, wazuh-dashboard, kubeflow-katib, opensearch-dashboards, aw...

Vulnerability Disclosure in the Age of AI

New article: "Responsible Disclosure in the Age of AI: A Call for Urgent Action," by Melissa Hathaway. Abstract: Artificial intelligence is fundamentally reshaping the balance between vulnerability discovery and remediation. Frontier AI models are now capable of autonomously identifying exploitab...

Malicious code in chai-as-minted (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d83ed5082a6682efba4b40e072e84fb1f7c6aa0dbf8ecd56a62c8d485e058e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...