.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

GHSA-H84G-69H7-MW6V vulnerabilities

Vulnerabilities for packages: debezium...

CVE-2026-55153 vulnerabilities

Vulnerabilities for packages: debezium...

GO-2026-6222 vulnerabilities

Vulnerabilities for packages: gitea, kitty, seaweedfs, mailpit, ollama, bento, kubescape, rclone, pdfcpu, mattermost...

CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: gitea, kitty, seaweedfs, mailpit, ollama, bento, kubescape, rclone, pdfcpu, mattermost...

[SECURITY] Fedora 44 Update: rust-pretty-git-prompt-0.2.2-11.fc44

Your current git repository information inside a beautiful shell prompt...

[SECURITY] Fedora 44 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc44

Full-featured terminal-based sequence editor for Git interactive rebase...

CVE-2026-73055

Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...

CVE-2026-73055

Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...

CVE-2026-55153 vulnerabilities

Vulnerabilities for packages: hono, airbyte-platform-fips, airbyte-server-fips, debezium, airbyte-platform...

GHSA-HJCP-JMPX-G3QM vulnerabilities

Vulnerabilities for packages: apicurio-registry, kserve-modelmesh, trino, opensearch, akhq, nrjmx, cloudwatch-exporter, sonarqube, logstash, druid, thingsboard, dependency-track, cassandra-reaper...

CVE-2026-64607 vulnerabilities

Vulnerabilities for packages: apicurio-registry, kserve-modelmesh, trino, opensearch, akhq, nrjmx, cloudwatch-exporter, sonarqube, logstash, druid, thingsboard, dependency-track, cassandra-reaper...

CVE-2026-74571

In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree root triggers a NULL pointer dereference: BUG: kernel NULL pointer dereference, address:...

CVE-2026-74568

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fix race between LPI release and re-registration Fix a potential race between decrementing an LPI's reference count and evicting that structure from the LPI xarray. LPI structures are maintained in the VGIC LPI...

CVE-2026-74565

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: make nftobject rhltable per table The nftobject rhltable is global, this allows for accessing objects that are being dismangled from lookup path by other existing netns. Given the nftobjdestroy releases the...

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

CVE-2026-74563

In the Linux kernel, the following vulnerability has been resolved: rds: tcp: hold the RCU lock across ipv6chkaddr in rdstcpladdrcheck rdstcpladdrcheck looks up a scoped IPv6 interface with devgetbyindexrcu, drops the RCU read-side lock, and only then passes the bare struct netdevice into...

CVE-2026-74562

In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh-lock for f6ilist walks in replace check and notify fib6checknhlist and nexthopreplacenotify walk nh-f6ilist during an RTNL-serialized nexthop replace without holding nh-lock. IPv6 RTMNEWROUTE/RTMDELROUTE run...

CVE-2026-74561

In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6ilist walk in nhrtcacheflush nhrtcacheflush walks nh-f6ilist during an RTNL-serialized nexthop replace without holding nh-lock, racing the unlocked IPv6 route add/delete that mutate the list under nh-loc...