CLSA-2026-1792256004 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.0.0-alpha.17-tuxcare.1...

CLSA-2026-1792256003 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.6-tuxcare.1...

CLSA-2026-1792256002 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.2-tuxcare.1...

CLSA-2026-1792256001 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 5.0.1-tuxcare.1...

CLSA-2026-1792256000 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.0-tuxcare.1...

CLSA-2026-1792255999 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.7-tuxcare.2...

CLSA-2026-1792255997 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 15.1.3-tuxcare.1...

CLSA-2026-1792255998 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 15.1.3-tuxcare.2...

CLSA-2026-1792255995 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 12.3.7-tuxcare.1...

CLSA-2026-1792255996 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 13.6.9-tuxcare.1...

CLSA-2026-1792255994 TuxCare security update for @react-native-community/cli-server-api (1 CVE)

TuxCare rebuilt @react-native-community/cli-server-api to address 1 CVE. Fixed in 11.4.1-tuxcare.1...

Gitea authorization issue vulnerability

Gitea 1.27.2 and earlier versions have an authorization issue. This issue arises from the lack of the individualPermsChecker middleware during the registration of seven API routes under /api/v1/users/username. This failure does not enforce visibility for target users, potentially allowing...

Gitea information leakage vulnerability

The Gitea version from 1.22.0 to 28.1.0 has an information leakage vulnerability. This vulnerability arises from the assets list returned during the creation of draft releases via API. These assets are built from releases without IDs, which matches all attachments not associated with any releases...

David Courtey: Database Authorization Vulnerability

David Courtey: Versions of the DatabaseEngine 1.8.1 and earlier have an authorization issue. This vulnerability stems from the improper handling of the parameter schemaname by the Scheduled Restore component in the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php. As a result,...

Gitea authorization issue vulnerability

Gitea 1.26.4 and earlier versions have an authorization issue. This vulnerability stems from the GET /api/v1/user/subscriptions interface not checking whether the user still has access to repositories. As a result, users who have lost access to private repositories can still read metadata such as...

NetEase Youdao LobsterAI encryption vulnerability

NetEase Youdao LobsterAI versions prior to 2026.10.16 had an encryption vulnerability. This vulnerability stemmed from the use of a hardcoded password when exporting API keys. Attackers could obtain the exported files and utilize the salt values embedded within them to derive AES-GCM keys using...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains a security vulnerability. This vulnerability arises from the incorrect invocation of the bonding-specific API when processing team device events by using net/mlx5. This leads to out-of-bound memory access to the slab structure...

Plane Labs Plane: Input validation vulnerability

Plane Labs’ Plane 1.4.2 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper handling of the X-Forwarded-For parameter by the API Endpoint component. The system relies on untrusted inputs in its security decisions, which could allow...

Teable authorization issue vulnerability

The teable component has an authorization vulnerability. This vulnerability stems from the PATCH endpoint /api/base/:baseId/node/folder/:folderId, which only checks the base|update permission based on the baseId in the URL. Certified users can rename folders in a base with no membership by...

ProjectSend authorization issue vulnerability

The ProjectSend version 2.0.0 to 2.7.0 had an authorization issue vulnerability. This vulnerability stemmed from improper authorization. Users who possess restricted API tokens were able to change the token owner credentials via the PATCH /api/v1/users/user endpoint. Only tokens with the...