CLSA-2026-1792208101 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 15.2.1-tuxcare.1...

CLSA-2026-1792208100 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 12.0.0-tuxcare.1...

CLSA-2026-1792208099 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 14.2.8-tuxcare.1...

CLSA-2026-1792208098 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 12.2.0-tuxcare.1...

CLSA-2026-1792208096 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 13.3.0-tuxcare.1...

CLSA-2026-1792208097 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 15.2.9-tuxcare.1...

CLSA-2026-1792208094 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 16.2.7-tuxcare.1...

CLSA-2026-1792208095 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 15.2.6-tuxcare.1...

CLSA-2026-1792208086 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 15.2.10-tuxcare.2...

CLSA-2026-1792208080 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 18.2.14-tuxcare.1...

CLSA-2026-1792208076 TuxCare security update for @angular/upgrade (1 CVE)

TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 14.3.0-tuxcare.1...

CVE-2026-57169 Dockhand: Unauthenticated container exec via WebSocket upgrade

Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers//exec does not enforce authentication on the WebSocket upgrade request. When an unauthenticated attacker has network reach to Dockhand, knows a target container ID, and targets...

CVE-2026-57169

The Docker management application Dockhand is vulnerable to unauthenticated command execution in versions prior to 1.0.34 . The /api/containers/exec endpoint fails to enforce authentication during a WebSocket upgrade request. An unauthenticated attacker with network reach and knowledge of a targe...

CLSA-2026-1792161848 TuxCare security update for @astrojs/upgrade (13 CVEs)

TuxCare rebuilt @astrojs/upgrade to address 13 CVEs. Fixed in 3.6.5-tuxcare.1...

CLSA-2026-1792161847 TuxCare security update for @astrojs/upgrade (10 CVEs)

TuxCare rebuilt @astrojs/upgrade to address 10 CVEs. Fixed in 4.16.19-tuxcare.1...

Sonatype Nexus Repository Manager 3 - Remote Code Execution

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection id: CVE-2020-10199 info: name: Sonatype Nexus Repository Manager 3 - Remote Code Execution author: rootxharsh,iamnoooob,pdresearch severity: high description: Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection impact: |...

strapi CMS <3.0.0-beta.17.5 - Admin Password Reset

strapi CMS before 3.0.0-beta.17.5 allows admin password resets because it mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. id: CVE-2019-18818 info: name: strapi CMS 3.0.0-beta.17.5 - Admin Password Reset...

Apache OFBiz - Improper Authorization & Remote Code Execution

Improper Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free remote desktop protocol library and client. All FreeRDP-based clients that use the /video command-line switch may read uninitialized data, interpret it as audio/video, and display the result. Server implementations based on FreeRDP are not affected by this issue. This issue has...

Astra Linux – Vulnerability in Batik

A vulnerability in Batik of Apache XML Graphics allows an attacker to execute untrusted Java code from an SVG. This issue affects Apache XML Graphics versions prior to 1.16. It is recommended to update to version 1.16...