DSA-5951-1 icu - security update

Bulletin has no description...

JVN#92520966: Multiple vulnerabilities in iroha Board

iroha Board provided by iroha Soft Co., Ltd. contains multiple vulnerabilities listed below. Forced browsing CWE-425 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Base Score 5.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Base Score 4.3 CVE-2025-41404 Cross-site request forgery...

DLA-4232-1 freeradius - security update

Bulletin has no description...

DSA-5946-1 gdk-pixbuf - security update

Bulletin has no description...

PT-2025-26397 · Stellarwp · Stellarwp Wpcomplete

Name of the Vulnerable Software and Affected Versions: StellarWP WPComplete versions n/a through 2.9.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

DLA-4220-1 konsole - security update

Bulletin has no description...

DLA-4219-1 gst-plugins-bad1.0 - security update

Bulletin has no description...

RHSA-2025:9056 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2025:8696 Red Hat Security Advisory: perl-FCGI:0.78 security update

Bulletin has no description...

MAL-2025-4797 Malicious code in @loybung/emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93520f6920db8156f89701cab5337d1aeb0421b6e8d4a598896dd12b78aad06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DSA-5940-1 modsecurity-apache - security update

Bulletin has no description...

RHSA-2025:8530 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

DLA-4202-1 net-tools - security update

Bulletin has no description...

DLA-4193-1 linux-6.1 - security update

Bulletin has no description...

RHSA-2025:8288 Red Hat Security Advisory: pcs security update

Bulletin has no description...

RHSA-2025:8181 Red Hat Security Advisory: openldap security update

Bulletin has no description...

DLA-4179-1 libavif - security update

Bulletin has no description...

JVN#39546799: Mailform Pro CGI generating error messages containing sensitive information

Mailform Pro CGI provided by SYNCK GRAPHICA contains a vulnerability listed below. Generation of error message containing sensitive information CWE-209 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Base Score 6.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Base Score 3.7...

CVE-2025-48371 OpenFGA Authorization Bypass

OpenFGA is an authorization/permission engine. OpenFGA versions 1.8.0 through 1.8.12 corresponding to Helm chart openfga-0.2.16 through openfga-0.2.30 and docker 1.8.0 through 1.8.12 are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users are affected...

PT-2025-22502 · Cloudflare · Pingora

Name of the Vulnerable Software and Affected Versions: Pingora versions prior to the fixed version Description: A request smuggling issue was identified in Pingora's proxying framework, pingora-proxy, allowing malicious HTTP requests to be injected via manipulated request bodies on cache HITs. Th...