golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

CVE-2026-50190

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3. A patched version of the package is available...

CVE-2026-14677 affecting package postgresql for versions less than 16.15-1

CVE-2026-14677 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14664 affecting package postgresql for versions less than 16.15-1

CVE-2026-14664 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-16239 affecting package postgresql for versions less than 16.15-1

CVE-2026-16239 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14670 affecting package postgresql for versions less than 16.15-1

CVE-2026-14670 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-15741 affecting package postgresql for versions less than 16.15-1

CVE-2026-15741 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55950 affecting package erlang for versions less than 26.2.5.21-5

CVE-2026-55950 affecting package erlang for versions less than 26.2.5.21-5. A patched version of the package is available...

CVE-2026-53422 affecting package erlang for versions less than 26.2.5.21-5

CVE-2026-53422 affecting package erlang for versions less than 26.2.5.21-5. A patched version of the package is available...

CVE-2026-64652 affecting package gh for versions less than 2.97.0-1

CVE-2026-64652 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64653 affecting package gh for versions less than 2.97.0-1

CVE-2026-64653 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-54787 affecting package gh for versions less than 2.97.0-1

CVE-2026-54787 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-72817 affecting package gh for versions less than 2.97.0-1

CVE-2026-72817 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14678 affecting package postgresql for versions less than 16.15-1

CVE-2026-14678 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-18024 affecting package postgresql for versions less than 16.15-1

CVE-2026-18024 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14663 affecting package postgresql for versions less than 16.15-1

CVE-2026-14663 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64655 affecting package gh for versions less than 2.97.0-1

CVE-2026-64655 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64654 affecting package gh for versions less than 2.97.0-1

CVE-2026-64654 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...