io.github.compyoot:utilities-and-generic-tools (0.3.11), org.scala-sbt.ivy:ivy (>=2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e, <=2.3.0-sbt-5681e1a77a149b93a4cfbe4a86d0263d7bd223eb) potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk14 (1.45)

org.bouncycastle:bcpg-jdk14 MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-jdk14 and may be impacted: - io.github.compyoot:utilities-and-generic-tools 0.3.11 - org.scala-sbt.ivy:ivy...

io.github.compyoot:utilities-and-generic-tools (0.3.11), org.scala-sbt.ivy:ivy (>=2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e, <=2.3.0-sbt-5681e1a77a149b93a4cfbe4a86d0263d7bd223eb) potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk14 (1.45)

org.bouncycastle:bcpg-jdk14 MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-jdk14 and may be impacted: - io.github.compyoot:utilities-and-generic-tools 0.3.11 - org.scala-sbt.ivy:ivy...

Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.1 (CUDA)

Red Hat AI Inference Server Model Optimization Tools 3.3.1 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...

OESA-2026-1971 uboot-tools security update

This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 200...

New CGrabber and Direct-Sys Malware Spread Through GitHub ZIP Files

Hackers spread CGrabber and Direct-Sys malware through GitHub ZIP files, bypassing security tools to steal passwords, crypto wallets, and user data...

Security update for smc-tools

This update for smc-tools fixes the following issue: Update to smc-tools v1.8.7: predictable /tmp file allows for local denial of service bsc1230052. Changelog: Update to v1.8.7: smcrnics: fix regression when PFT not available smcd/smcr: prevent DoS on statistics workfile present in /tmp/ Update ...

SUSE-SU-2026:1422-1 Security update for smc-tools

This update for smc-tools fixes the following issue: Update to smc-tools v1.8.7: - predictable /tmp file allows for local denial of service bsc1230052. Changelog: Update to v1.8.7: - smcrnics: fix regression when PFT not available - smcd/smcr: prevent DoS on statistics workfile present in /tmp/...

Unity Linux 20.1070a Security Update: open-vm-tools (UTSA-2026-007257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007257 advisory. VMware Tools contains an insecure file handling vulnerability.A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigge...

PT-2026-35382

This update for smc-tools fixes the following issue: Update to smc-tools v1.8.7: - predictable /tmp file allows for local denial of service bsc1230052. Changelog: Update to v1.8.7: - smc rnics: fix regression when PFT not available - smcd/smcr: prevent DoS on statistics workfile present in /tmp/...

PT-2026-33478

Name of the Vulnerable Software and Affected Versions OpenViking versions prior to commit c7bb167 Description An authentication bypass exists in the VikingBot OpenAPI HTTP route surface. The issue occurs when the api key configuration value is unset or empty, causing the authentication check to...

PT-2026-37010

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.9 through 2026.4.9 Description A sender policy bypass exists in the outbound host-media attachment read helper. This issue allows unauthorized local file disclosure when deployments allow host read or filesystem root...

[SECURITY] Fedora 44 Update: plasma-sdk-6.6.4-1.fc44

Plasma SDK contains tools for plasma development...

[SECURITY] Fedora 44 Update: kde-cli-tools-6.6.4-1.fc44

Provides several KDE and Plasma specific command line tools to allow better interaction with the system...

codemie-tools (>=0.0.352, <=0.1.14.0), neuroaihub (>=1.0.0, <=1.0.2) +5 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.17)

langchain-openai PYPI version 0.3.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - codemie-tools =0.0.352, =1.0.0, =0.1.2, =0.2.8, =0.1.0, =2.6.13, =2.6.22 Source cves: CVE-2026-41488 Source advisory:...

AZL-85634 CVE-2026-35469 affecting package cri-tools for versions less than 1.32.0-6

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...

criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-41314 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-41314 Source advisory: OSV:GHSA-X284-J5P8-9C5P...

criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-41313 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-41313 Source advisory: OSV:GHSA-4PXV-J86V-MHCW...

criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-41312 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-41312 Source advisory: OSV:GHSA-7GW9-CF7V-778F...

Wordfence Intelligence Weekly WordPress Vulnerability Report (April 6, 2026 to April 12, 2026)

Last week, there were 157 vulnerabilities disclosed in 141 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 79 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

airflow-clickhouse-plugin (1.2.0), airflow-tools (>=0.8.5, <=0.9.1) +2 more potentially affected by CVE-2025-54550 via apache-airflow (2.8.4)

apache-airflow PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 1.2.0 - airflow-tools =0.8.5, =0.0.4, =2.4.0rc1, =2.5.1 Source cves: CVE-2025-54550 Source advisory:...