CLEANSTART-2026-BG87616 Security fixes for CVE-2026-34986, ghsa-78h2-9frx-2jm8 applied in versions: 0.48.1-r0

Multiple security vulnerabilities affect the melange package. These issues are resolved in later releases. See references for individual vulnerability details...

Security update for nodejs24

This update for nodejs24 fixes the following issues Update to 24.17.0: CVE-2026-2581: undici: Undici: Denial of Service due to uncontrolled resource consumption bsc1268480. CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery...

CLEANSTART-2026-LU08936 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.8.2-r0

Multiple security vulnerabilities affect the fulcio package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2025-12929

Malicious code in bioql PyPI...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2025-1397)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-21977

In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs Gen 2 Hyper-V VMs boot via EFI and have a standard EFI framebuffer device. When the kdump kernel runs in such a VM, loading the efifb driver may hang because of...

Medium: python3.11

Issue Overview: Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267. CVE-2007-4559...

Virtuozzo Hybrid Server 7.5 Update 7 Hotfix 2 (7.5.7-167)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 7 provides fixes for the c2v-convert tool. Vulnerability id: PSBM-159914 c2v-convert could fail if the container's template does not match the distribution installed in the container due to actions like Ubuntu's apt dist-upgrade or apt...

Amazon Linux 2 : python38 (ALASPYTHON3.8-2024-016)

The version of python38 installed on the remote host is prior to 3.8.20-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PYTHON3.8-2024-016 advisory. Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python...

Medium: containerd

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

Smail 3.2.0.120 - Remote Heap Overflow

/ 0 smail preparseaddress1 heap bof remote root exploit infamous42md AT hotpop DOT com Shouts: BMF, wipe with the left, eat with the right Notes: You can't have any characters in overflow buffer that isspace returns true for. The shellcode is clear of them, but if your return address or retloc ha...