Medium: nerdctl

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

Important: util-linux

Issue Overview: Integer Overflow or Wraparound in libblkid/src/partitions/dos.c CVE-2026-53615 Affected Packages: util-linux Issue Correction: Run dnf update util-linux --releasever 2023.12.20260706 or dnf update --advisory ALAS2023-2026-1916 --releasever 2023.12.20260706 to update your system...

CVE-2026-13769

A flaw was found in AWS CLI. Overly permissive file permissions on Unix-like systems, where the umask has not been configured to restrict file permissions, may allow other local users on the same host to read credentials. This occurs when certain AWS CLI subcommands, such as aws codeartifact logi...

aichatbot (0.0.1), aiqc (>=2.1.0, <=7.1.5) +53 more potentially affected by CVE-2026-55379 via pillow (8.1.2)

pillow PYPI version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aichatbot 0.0.1 - aiqc =2.1.0, =0.0.2, =0.0.1, =0.14.0, =0.14.0, =0.0.0a1, =2.0.1, =0.2.0, =0.0.2, =3.0.8rc6, =3.0.8rc7 - django-image-assets 0.2.0...

abraia (>=0.8.10, <=0.9.2), adamapi (>=2.1.0, <=2.2.0) +128 more potentially affected by CVE-2026-54059 via pillow (8.3.2)

pillow PYPI version 8.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abraia =0.8.10, =2.1.0, =1.1.3, =1.5.0, =0.0.25, =0.2.2, =0.0.2a2, =1.4.0, =0.2.2, =0.0.1, =0.2.1b20210731, =0.2.1b20210731, =0.3.2b20211206 and mor...

adachi-resource-assistant (>=2.8.0, <=3.0.2), amazon-textract-pipeline-pagedimensions (0.0.6) +84 more potentially affected by CVE-2026-54059 via pillow (9.1.1)

pillow PYPI version 9.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adachi-resource-assistant =2.8.0, =1.0.0, =22.5.20, =0.1.1, =1.66.4, =2.6.14, =22.22.1, =0.6.2, =10.2.0b5, =0.0.1, =2.1.7 and more Source cves:...

adachi-resource-assistant (>=2.8.0, <=3.0.2), amazon-textract-pipeline-pagedimensions (0.0.6) +84 more potentially affected by CVE-2026-55379 via pillow (9.1.1)

pillow PYPI version 9.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adachi-resource-assistant =2.8.0, =1.0.0, =22.5.20, =0.1.1, =1.66.4, =2.6.14, =22.22.1, =0.6.2, =10.2.0b5, =0.0.1, =2.1.7 and more Source cves:...

adaptgym (>=0.1.0, <=0.1.2), agave-pyclient (>=1.0.0, <=1.1.2) +138 more potentially affected by CVE-2026-54060 via pillow (8.2.0)

pillow PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adaptgym =0.1.0, =1.0.0, =1.1.5, =1.2.3, =0.0.21, =1.0.1, =0.0.7, =0.15.0, =0.14.0, =0.3.0, =0.4.0 - arcor2-dobot 0.2.3 - arcor2-execution 0.16.0 -...

abraia (>=0.8.10, <=0.9.2), adamapi (>=2.1.0, <=2.2.0) +128 more potentially affected by CVE-2026-55380 via pillow (8.3.2)

pillow PYPI version 8.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abraia =0.8.10, =2.1.0, =1.1.3, =1.5.0, =0.0.25, =0.2.2, =0.0.2a2, =1.4.0, =0.2.2, =0.0.1, =0.2.1b20210731, =0.2.1b20210731, =0.3.2b20211206 and mor...

adaptgym (>=0.1.0, <=0.1.2), agave-pyclient (>=1.0.0, <=1.1.2) +138 more potentially affected by CVE-2026-55380 via pillow (8.2.0)

pillow PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adaptgym =0.1.0, =1.0.0, =1.1.5, =1.2.3, =0.0.21, =1.0.1, =0.0.7, =0.15.0, =0.14.0, =0.3.0, =0.4.0 - arcor2-dobot 0.2.3 - arcor2-execution 0.16.0 -...

CVE-2026-56140

A flaw was found in the Apache Camel AWS SNS component camel-aws2-sns. An improper input validation vulnerability exists in the Sns2HeaderFilterStrategy due to a missing inbound filter rule. However, this component is producer-only, meaning it does not process external messages in a way that woul...

[SECURITY] Fedora 43 Update: rust-reqsign-aws-v4-3.0.1-2.fc43

AWS SigV4 signing implementation for reqsign...

[SECURITY] Fedora 44 Update: rust-reqsign-aws-v4-3.0.1-2.fc44

AWS SigV4 signing implementation for reqsign...

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' due to the lack of an inbound filter rule in Sns2HeaderFilterStrategy. An attacker cannot manipulate internal headers o...

CVE-2026-43867 Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter

Deserialization of Untrusted Data vulnerability in Apache Camel PQC Component. The camel-pqc component persists post-quantum key metadata KeyMetadata through pluggable KeyLifecycleManager implementations. AwsSecretsManagerKeyLifecycleManager.deserializeMetadata reads that metadata back from the...

CVE-2026-43867

Deserialization of Untrusted Data vulnerability in Apache Camel PQC Component. The camel-pqc component persists post-quantum key metadata KeyMetadata through pluggable KeyLifecycleManager implementations. AwsSecretsManagerKeyLifecycleManager.deserializeMetadata reads that metadata back from the...

CVE-2026-56140

The Apache Camel AWS SNS component (camel-aws2-sns) contains an improper input validation vulnerability in the Sns2HeaderFilterStrategy due to a missing inbound filter rule. While a similar gap in the sibling camel-aws2-sqs component is exploitable, this specific issue is not reachable by an atta...

CVE-2026-56140 Apache Camel AWS2 SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy to align it with sibling components

Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel headers through a component-specific HeaderFilterStrategy, Sns2HeaderFilterStrategy. Like the sibling Sqs2HeaderFilterStrategy, it originally configured only an outbound filter...

CVE-2026-46590

The Apache Camel PQC component is vulnerable to CWE-502 Deserialization of Untrusted Data (CVE-2026-46590). The HashicorpVaultKeyLifecycleManager, AwsSecretsManagerKeyLifecycleManager, and FileBasedKeyLifecycleManager components use a raw java.io.ObjectInputStream.readObject() to deserialize Base...

CVE-2026-46590 Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter (incomplete remediation of CVE-2026-40048)

Deserialization of Untrusted Data vulnerability in Apache Camel PQC component. The camel-pqc component persists post-quantum key metadata KeyMetadata through pluggable KeyLifecycleManager implementations. HashicorpVaultKeyLifecycleManager and AwsSecretsManagerKeyLifecycleManager read that metadat...