PT-2026-48607

Unknown description...

CVE-2026-48753

Unknown description...

PT-2026-47214

Name of the Vulnerable Software and Affected Versions incus versions 6.0.x and 7.0.0 Description An authenticated user with can create storage volumes permissions can cause a denial of service by crashing the incusd daemon. The issue occurs during the processing of an imported custom-volume backu...

PT-2026-47209

Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description A nil-pointer dereference exists in the CreateInstanceFromBackup function within the internal/server/storage/backend.go file. An authenticated user with permissions to create instances in any...

PT-2026-47201

Unknown description...

CVE-2025-26843

Unknown description...

PT-2026-47213

Name of the Vulnerable Software and Affected Versions Incus version 7.0.0 Description An authenticated user with can create instances permission can cause a denial of service by crashing the incusd daemon. The issue occurs when the daemon processes an instance backup tarball containing a malforme...

PT-2026-47223

Name of the Vulnerable Software and Affected Versions guzzlehttp/psr7 versions prior to 2.10.2 Description The library fails to reject ASCII control characters, whitespace, or DEL in first-party URI host components. When an application uses a user-controlled URL to construct a PSR-7 Uri or Reques...

CVE-2026-48754

Unknown description...

PT-2026-47222

Name of the Vulnerable Software and Affected Versions guzzlehttp/psr7 versions prior to 2.10.2 Description Improper Host header validation occurs when parsing raw HTTP request messages or deriving a server request URI from server variables. An attacker can provide a malformed Host header containi...

PT-2026-47208

Name of the Vulnerable Software and Affected Versions Dulwich versions prior to 1.2.5 Description An uncontrolled resource consumption issue leads to memory exhaustion and denial-of-service. A client with push access can send a small crafted thin pack where the delta header specifies an excessive...

PT-2026-47212

Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description The S3 protocol upload endpoint is susceptible to path traversal, enabling the creation of arbitrary files on the host system. This occurs because the uploadId variable is appended to the uploa...

CVE-2026-48756

Unknown description...

CVE-2026-47753

Unknown description...

PT-2026-47216

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 6.4 Symfony versions prior to 7.4 Symfony versions prior to 8.0 Symfony versions prior to 8.1 Description An issue exists in the...

PT-2026-47217

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 5.4.48 Symfony versions prior to 6.4.15 Symfony versions prior to 7.4.0 Symfony versions prior to 8.0.0 Symfony versions prior to 8.1.0 Description The doGenerate function in SymfonyComponentRoutingGeneratorUrlGenerat...

PT-2026-47219

Name of the Vulnerable Software and Affected Versions Twig versions prior to 3.26.0 Description An issue exists where the sandbox visitor fails to wrap mapping keys in ArrayExpression with CheckToStringNode. When a dynamic key expression resolves to a Stringable object, the ArrayExpression::compi...

PT-2026-47215

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 6.4 Symfony versions prior to 7.4 Symfony versions prior to 8.0 Symfony versions prior to 8.1 Description The UrlSanitizer::parse function fails to properly reject certain characters, allowing for visual spoofing of...

PT-2026-47092

Name of the Vulnerable Software and Affected Versions jq versions prior to 1.8.2 Description Comparing two deeply nested arrays using the == operator can lead to a denial of service through stack exhaustion caused by uncontrolled recursion. The issue occurs within the recursive structural...

PT-2026-47091

Name of the Vulnerable Software and Affected Versions crun affected versions not specified Description Security issues were identified and subsequently resolved in the software. Recommendations Update to version 1.28-1.1...