Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Using the “after free” mechanism in the Digital Credentials API in Google Chrome before version 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

CVE-2026-9678 vulnerabilities

Vulnerabilities for packages: langfuse-fips, kibana, code-server, gemini-cli, langfuse, renovate, py3-captum, pelias-api, vitess...

GHSA-VMH5-MC38-953G vulnerabilities

Vulnerabilities for packages: langfuse-fips, kibana, code-server, renovate, langfuse, py3-captum, pelias-api, vitess...

CVE-2026-9697 vulnerabilities

Vulnerabilities for packages: langfuse-fips, kibana, code-server, renovate, langfuse, py3-captum, pelias-api, vitess...

GHSA-HM92-R4W5-C3MJ vulnerabilities

Vulnerabilities for packages: kibana, code-server, renovate, py3-captum, pelias-api, vitess...

GHSA-PR7R-676H-XCF6 vulnerabilities

Vulnerabilities for packages: langfuse-fips, kibana, code-server, gemini-cli, langfuse, renovate, py3-captum, pelias-api, vitess...

CVE-2026-6734 vulnerabilities

Vulnerabilities for packages: kibana, code-server, renovate, py3-captum, pelias-api, vitess...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cloudbeat, docker-cli-buildx-fips, cloudbeat-fips, xeol-fips, kubescape-server, helm-fips, redpanda-operator, kubescape-operator-fips, consul-k8s-fips, jfrog-cli, grype-db, zot, chartmuseum, helm-operator, helmfile, linkerd2, steampipe, trivy, kube-mgmt,...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: kibana, code-server, npm, node-gyp, saf, gemini-cli, prism, renovate, py3-captum, actions-runner, haraka, pelias-api, vitess...

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: kibana, code-server, npm, node-gyp, saf, gemini-cli, prism, renovate, py3-captum, actions-runner, haraka, pelias-api, vitess...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: kibana, code-server, npm, node-gyp, saf, gemini-cli, prism, renovate, py3-captum, actions-runner, haraka, pelias-api, vitess...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: kibana, code-server, npm, node-gyp, saf, gemini-cli, prism, renovate, py3-captum, actions-runner, haraka, pelias-api, vitess...

GHSA-35P6-XMWP-9G52 vulnerabilities

Vulnerabilities for packages: kibana, code-server, npm, node-gyp, saf, gemini-cli, prism, renovate, py3-captum, actions-runner, haraka, pelias-api, vitess...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: kibana, code-server, npm, node-gyp, saf, gemini-cli, prism, renovate, py3-captum, actions-runner, haraka, pelias-api, vitess...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: kibana, code-server, npm, node-gyp, saf, gemini-cli, prism, renovate, py3-captum, actions-runner, haraka, pelias-api, vitess...

K000161850: urllib3 vulnerability CVE-2025-66471

Security Advisory Description urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the...

Ubuntu 20.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8462-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8462-1 advisory. It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A...

PT-2026-51576

Name of the Vulnerable Software and Affected Versions immich versions 4ffa26c9 through 4eb1003 Description A reflected cross-site scripting XSS issue exists on the '/auth/login' page. The continue query parameter is processed by SvelteKit's redirect function without proper scheme or origin...

PT-2026-51585

Name of the Vulnerable Software and Affected Versions Event-Driven Ansible affected versions not specified Description A missing authorization issue exists in the websocket API. The '/api/eda/ws/ansible-rulebook' endpoint fails to verify user permissions when processing Worker messages. This allo...