CVE-2026-42571 Privilege Escalation Attack affecting Pelican Web UI

Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface WebUI. This attack allows any user...

OESA-2026-2220 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. MultiPartParser allows remote attackers to degrade performance by submitting multipart uploads wi...

CVE-2026-42310

Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0...

BELL-CVE-2026-43237

Bulletin has no description...

BELL-CVE-2026-43224

Bulletin has no description...

BELL-CVE-2026-43188

Bulletin has no description...

BELL-CVE-2026-43122 CVE-2026-43122 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43160

Bulletin has no description...

BELL-CVE-2026-43096 CVE-2026-43096 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43465

Bulletin has no description...

BELL-CVE-2026-43431 CVE-2026-43431 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43454

Bulletin has no description...

BELL-CVE-2026-43385 CVE-2026-43385 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43364

Bulletin has no description...

BELL-CVE-2025-71296

Bulletin has no description...

CVE-2026-42560 auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation

auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the same local user.ID, instead of deriving a unique ID from the Patreon account returned by Patreon. ...

EUVD-2026-28904

auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the same local user.ID, instead of deriving a unique ID from the Patreon account returned by Patreon. ...

CVE-2026-31721 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-31721 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-23374 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-23374 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...