vantage6-algorithm-store (4.7.0rc2), vantage6-node (4.7.0rc2) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.7.0rc2)

vantage6 PYPI version 4.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.7.0rc2 - vantage6-node 4.7.0rc2 - vantage6-server 4.7.0rc2 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.5.4), vantage6-server (4.5.4) potentially affected by CVE-2026-73652 via vantage6 (4.5.4)

vantage6 PYPI version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.5.4 - vantage6-server 4.5.4 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-algorithm-store (4.3.4), vantage6-node (4.3.4) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.3.4)

vantage6 PYPI version 4.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.3.4 - vantage6-node 4.3.4 - vantage6-server 4.3.4 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6V...

vantage6-algorithm-store (4.13.4), vantage6-node (4.13.4) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.4)

vantage6 PYPI version 4.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.4 - vantage6-node 4.13.4 - vantage6-server 4.13.4 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.10.2), vantage6-node (4.10.2) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.10.2)

vantage6 PYPI version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.10.2 - vantage6-node 4.10.2 - vantage6-server 4.10.2 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.3.0b6), vantage6-node (4.3.0b6) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.3.0b6)

vantage6 PYPI version 4.3.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.3.0b6 - vantage6-node 4.3.0b6 - vantage6-server 4.3.0b6 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.6.0rc6), vantage6-node (4.6.0rc6) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.6.0rc6)

vantage6 PYPI version 4.6.0rc6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.6.0rc6 - vantage6-node 4.6.0rc6 - vantage6-server 4.6.0rc6 Source cves: CVE-2026-73652 Source advisory:...

PT-2026-71736

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 5.0.3 Description vantage6 is an open-source infrastructure for privacy preserving analysis. The algorithm-store edit permission lacks an ownership check, which allows an algorithm developer to modify another...

Oracle Linux 10 : kernel (ELSA-2026-42919)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42919 advisory. - fanotify: fix false positive on permission events CKI Backport Bot RHEL-180076 CVE-2026-46150 - ice: fix double-free of txbuf skb Jakub Ramaseuski...

RockyLinux 10 : kernel (RLSA-2026:42919)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42919 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: Linux kernel: Denial of Service due to memory leak in...

Oracle Linux 9 : kernel (ELSA-2026-43307)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-43307 advisory. - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels Antoine Tenart RHEL-179297 CVE-2026-46099 - fanotify: fix false positive on permission events...

RockyLinux 9 : kernel (RLSA-2026:43307)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:43307 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: scsi: core: Wake up the error handler when final...

CVE-2026-13089

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

EUVD-2026-47803

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

CVE-2026-13089 OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

CVE-2026-13089 OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

CVE-2026-13089 OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

CVE-2026-13089

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self-alg$self-header-alg from the token's own header and then calls...

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

AZL-93114 CVE-2026-10822 affecting package bind for versions less than 9.20.26-1

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...