pypdf: Possible long runtimes/large memory usage when extracting XForm objects

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. PatchesThis has been fixed in pypdf==6.16.1. WorkaroundsIf you cann...

RLSA-2026:65897 Important: qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...

qt5-qtbase security update

An update is available for qt5-qtbase. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt is a software toolkit for developing applications. The qt5-base package...

Malicious Package

Overview sams-text-style is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the sams-text-style...

RLSA-2026:65993 Important: qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...

qt5-qtbase security update

An update is available for qt5-qtbase. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt is a software toolkit for developing applications. The qt5-base package...

PT-2026-89571

Name of the Vulnerable Software and Affected Versions Angular versions prior to 20.3.30 Angular versions prior to 21.2.22 Angular versions prior to 22.1.4 Description Server-side rendering SSR in @angular/platform-server fails to properly escape matching ancestor closing tags when serializing...

PT-2026-89736

Name of the Vulnerable Software and Affected Versions @jhb.software/payload-alt-text-plugin version 0.7.0 Description An authorization bypass exists in the @jhb.software/payload-alt-text-plugin plugin for Payload CMS. The plugin exposes the endpoints POST /api/alt-text-plugin/generate and POST...

RockyLinux 9 : qt5-qtbase (RLSA-2026:65993)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65993 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : qt5-qtbase (ALSA-2026:65993)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:65993 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...

AlmaLinux 10 : qt6-qt5compat (ALSA-2026:65816)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:65816 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...

RockyLinux 8 : qt5-qtbase (RLSA-2026:65897)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65897 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...

AlmaLinux 8 : qt5-qtbase (ALSA-2026:65897)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:65897 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...

PT-2026-89685

Alt Text Endpoint Authorization Bypass via Payload Local API overrideAccess Omission Summary @jhb.software/payload-alt-text-plugin v0.7.0 exposes custom Payload CMS endpoints POST /api/alt-text-plugin/generate and /bulk that call the Payload Local API findByID and update without setting...

RLSA-2026:65816 Important: qt6-qt5compat security update

Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed i...

qt6-qt5compat security update

An update is available for qt6-qt5compat. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of...

Important: Red Hat Security Advisory: qt5-qtbase security update

An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Malicious code in sams-text-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81a7140e2d1a61a8bb4c6594ad8b75cadab20788d22005d9bf026d834c2e626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16091 Malicious code in sams-text-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81a7140e2d1a61a8bb4c6594ad8b75cadab20788d22005d9bf026d834c2e626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: Red Hat Security Advisory: qt5-qtbase security update

An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...