109 matches found
Medium: golang
Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...
SUSE-SU-2026:2472-1 Security update for apache-sshd, jpgpj
This update for apache-sshd, jpgpj fixes the following issues - CVE-2020-36843: no check performed on scalar to avoid signature malleability bsc1239551. - CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git bsc1267018. Changes for jpgpj: - Initial packaging with v1.3...
Photon OS 4.0: Dotnet PHSA-2026-4.0-1036
An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1036. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-53655 vulnerabilities
Vulnerabilities for packages: prism, npm, lerna, pnpm-stage0, tileserver-gl, sqlpad, thingsboard, py3-jupyterlab, pulumi, saf, renovate, code-server, kubeflow-katib...
CVE-2026-12301
creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...
CVE-2026-53539 vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, airflow-core, tritonserver-backend-vllm-cuda-12.9, wazuh-manager, airflow, litellm, wazuh-manager-fips...
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime...
DEBIAN-CVE-2026-52904
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkmdevice leak on aperture removal failure When apertureremoveconflictingpcidevices fails during probe, the error path returns directly without unwinding the nvkmdevice that was just allocated by nvkmdevicepcine...
CVE-2026-45536 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, camunda-zeebe, celeborn, strimzi-kafka-operator, spark-kubernetes-operator-fips, apache-activemq-artemis, zipkin, kserve-modelmesh, wavefront-proxy, pinot-fips, cassandra-reaper, apache-hop, wildfly, airbyte-server, infinispan, kayenta, seata,...
amazon-ssm-agent-3.3.4624.0-2.1 on GA media (moderate)
amazon-ssm-agent-3.3.4624.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10966-1 Rating: moderate Cross-References: CVE-2026-39827 CVE-2026-39828 CVE-2026-39834 CVE-2026-46598 CVSS scores: CVE-2026-39827 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-39827 SUSE : 7.1...
CLEANSTART-2026-KY82666 Security fixes for CVE-2025-61729, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.80.1-r0, 1.82.0-r0
Multiple security vulnerabilities affect the prometheus-redis-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-US10263 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-35206, ghsa-f6x5-jh6r-wrfv, ghsa-hr2v-4r36-88hr, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 0.8.10-r0, 0.8.11-r0, 0.8.4-r0
Multiple security vulnerabilities affect the k8ssandra-client-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
Amazon Linux 2023 : python3.12, python3.12-devel, python3.12-idle (ALAS2023-2026-1821)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1821 advisory. The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class and so does not use io.opencode to read the .pyc files. sys.aud...
chromedriver-149.0.7827.53-2.1 on GA media (moderate)
chromedriver-149.0.7827.53-2.1 on GA media Announcement ID: openSUSE-SU-2026:10958-1 Rating: moderate Cross-References: CVE-2026-10881 CVE-2026-10882 CVE-2026-10883 CVE-2026-10884 CVE-2026-10885 CVE-2026-10886 CVE-2026-10887 CVE-2026-10888 CVE-2026-10889 CVE-2026-10890 CVE-2026-10891 CVE-2026-108...
RHEL 9 : mysql (RHSA-2026:23332)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:23332 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...
CVE-2026-9929 vulnerabilities
Vulnerabilities for packages: chromium...
Fedora 43 : jpegxl (2026-3e75b379d4)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3e75b379d4 advisory. Update to version 0.11.2. Resolves CVE-2025-12474 and CVE-2026-1837. Release notes: https://github.com/libjxl/libjxl/releases/tag/v0.11.2 Tenable ha...
CVE-2026-42876 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
DEBIAN-CVE-2026-46255
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: don't explicitly disable clocks in .remove The clocks in fsledmaengine::muxclk are allocated and enabled with devmclkgetenabled, which automatically cleans these resources up, but these clocks are also manual...
