UBUNTU-CVE-2026-49387

Unknown description...

PT-2026-48605

Unknown description...

PT-2026-48608

Unknown description...

PT-2026-48606

Unknown description...

PT-2026-48607

Unknown description...

PT-2026-47212

Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description The S3 protocol upload endpoint is susceptible to path traversal, enabling the creation of arbitrary files on the host system. This occurs because the uploadId variable is appended to the uploa...

PT-2026-47223

Name of the Vulnerable Software and Affected Versions guzzlehttp/psr7 versions prior to 2.10.2 Description The library fails to reject ASCII control characters, whitespace, or DEL in first-party URI host components. When an application uses a user-controlled URL to construct a PSR-7 Uri or Reques...

PT-2026-47209

Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description A nil-pointer dereference exists in the CreateInstanceFromBackup function within the internal/server/storage/backend.go file. An authenticated user with permissions to create instances in any...

PT-2026-47208

Name of the Vulnerable Software and Affected Versions Dulwich versions prior to 1.2.5 Description An uncontrolled resource consumption issue leads to memory exhaustion and denial-of-service. A client with push access can send a small crafted thin pack where the delta header specifies an excessive...

PT-2026-47214

Name of the Vulnerable Software and Affected Versions incus versions 6.0.x and 7.0.0 Description An authenticated user with can create storage volumes permissions can cause a denial of service by crashing the incusd daemon. The issue occurs during the processing of an imported custom-volume backu...

CVE-2025-26843

Unknown description...

PT-2026-47213

Name of the Vulnerable Software and Affected Versions Incus version 7.0.0 Description An authenticated user with can create instances permission can cause a denial of service by crashing the incusd daemon. The issue occurs when the daemon processes an instance backup tarball containing a malforme...

PT-2026-47201

Unknown description...

PT-2026-47222

Name of the Vulnerable Software and Affected Versions guzzlehttp/psr7 versions prior to 2.10.2 Description Improper Host header validation occurs when parsing raw HTTP request messages or deriving a server request URI from server variables. An attacker can provide a malformed Host header containi...

PT-2026-47221

Name of the Vulnerable Software and Affected Versions Twig affected versions not specified Description An issue exists where sandboxing enabled through SourcePolicyInterface can be bypassed. The CoreExtension::column function receives the sandbox state via the needs is sandboxed channel as a...

PT-2026-47218

Name of the Vulnerable Software and Affected Versions Twig versions prior to 3.26.0 Description Deprecated internal wrappers in src/Resources/core.php for legacy third-party code fail to correctly handle sandbox state. Specifically, the functions twig array some and twig array every call...

PT-2026-47220

Name of the Vulnerable Software and Affected Versions Twig affected versions not specified Description An issue exists where a sandboxed template author can trigger a disallowed toString method on objects reachable from the render context, bypassing the security policy. This occurs through two...

PT-2026-47210

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 5.4.21 Description When a firewall is configured with form-login or any authenticator using DefaultAuthenticationFailureHandler and the failure forward: true option, the handler reads the failure path parameter from t...

PT-2026-47216

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 6.4 Symfony versions prior to 7.4 Symfony versions prior to 8.0 Symfony versions prior to 8.1 Description An issue exists in the...

PT-2026-47207

Name of the Vulnerable Software and Affected Versions Twig PHP templating engine affected versions not specified Description An allow-list bypass exists within the Sandbox filter, tag, and function mechanisms, which could allow an attacker to execute unauthorized actions by circumventing the...