CVE-2026-61372

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...

CVE-2026-18651

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked, the bind is reported as failed to the client, but the already-installed...

p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...

CVE-2026-47010 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-QW6J-RCFR-8VRX vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-HHF8-3X8G-6PFF vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-FHJM-G79R-VV57 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-46968 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47021 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-HHF8-3X8G-6PFF vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47010 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-QW6J-RCFR-8VRX vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47021 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-FHJM-G79R-VV57 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-46968 vulnerabilities

Vulnerabilities for packages: openjdk...

p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...

firefox: thunderbird: Privilege escalation in the DOM: Content Processes component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Content Processes component...

firefox: thunderbird: Information disclosure in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: ImageLib component...

firefox: thunderbird: Information disclosure in the Framework component in DevTools

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...