CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

Securing Data in the AI era

AI is changing the context around data risk, making it critical to understand what’s connected, what’s exposed, and why...

GO-2024-3269 vulnerabilities

Vulnerabilities for packages: gh...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, tigera-operator, datadog-agent, tigera-operator-fips, gitlab-operator...

GO-2026-6007 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, datadog-agent-fips, tigera-operator, datadog-agent, tigera-operator-fips, gitlab-operator...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, gitaly, rancher-fleet-fips, terragrunt, external-secrets-operator, cerbos, packer-fips, nemo, chainloop-cli, syft-fips, gitlab-rails-ce-fips, rclone, rclone-fips, chainloop-cli-fips, grafana-fips, syft, argo-cd-fips, kyverno-fips, flux-fips,...

GO-2024-3296 vulnerabilities

Vulnerabilities for packages: gh...

CVE-2026-72898 vulnerabilities

Vulnerabilities for packages: metabase...

MINI-P4WM-4RC2-VQ56

Bulletin has no description...

CVE-2026-19024

A flaw was found in HDF5. A local attacker could exploit a vulnerability in the H5Pgetfillvalue function by providing a specially crafted dataset. This could lead to a denial of service, making the system unavailable. Mitigation To reduce risk prior to patching, restrict processing HDF5 files fro...

CVE-2026-33328

A flaw was found in libvips, an image processing library. On 32-bit systems, a vulnerability in the gifload operation could lead to an integer overflow due to incorrectly determined image dimensions. This could allow a local attacker to cause the application to crash, resulting in a denial of...

USN-8630-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

Separating AI’s Technological Problems from Its Capitalism Problems

This essay was written with Nathan E. Sanders, and originally appeared inTech Policy Press. AI represents the first time we humans can do cognitive work outside of our bodies at scale. The only comparable moment is the early years of the industrial revolution, when new technologies like the steam...

Improper Encoding or Escaping of Output

Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via improper escaping in the getEscapeFunction function. An attacker can access sensitive home-directory information and potentially alter the target...

Command Injection

Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Command Injection in the escape and escapeAll functions when used on Unix systems with the shell explicitly configured to Zsh, or when the default shell is Zsh. An attacker can obtain lists of...

GHSA-4H4R-Q9XG-GFMM vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-73412

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...

USN-8636-1 linux-azure-6.17, linux-gcp-6.17, linux-hwe-6.17, linux-oem-6.17, linux-realtime-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network drivers; - Texas...

USN-8630-1 linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-realtime, linux-realtime-6.8, linux-xilinx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

This Coin-Sized Device Can Hack a Boeing 737

Security researchers found that in less than 60 seconds, they could open a hatch on a plane’s exterior, plug in a tiny device, and redirect the aircraft’s autopilot or sabotage its flight plan...