PT-2026-106239

Name of the Vulnerable Software and Affected Versions Camunda versions 7.24.0 through 7.24.14 Description An incorrect authorization issue exists in the Admin web application's first-run setup endpoint. The SetupResource incorrectly determines if the setup process is available by counting only...

PT-2026-106204

Name of the Vulnerable Software and Affected Versions Lybbn Django-Vue-Lyadmin versions prior to 3.2.13 Description An issue exists in the JWT Signing component within the file backend/application/settings.py. The manipulation of the SECRET KEY argument allows the use of a hard-coded cryptographi...

PT-2026-106051

FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowed classes filter for multiple-select fields. Attackers can submit a serialized XLSXWrite...

Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty

Summary IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-65432 DESCRIPTION: Apache CXF reads a top-level WSDL through its hardened StaxUtils path,...

[SECURITY] Fedora 45 Update: budgie-desktop-view-10.10.3-2.fc45

Official Budgie desktop icons application / implementation...

[SECURITY] Fedora 45 Update: vfrnav-20230429-38.fc45

This is a navigation application for VFR and IFR flying...

[SECURITY] Fedora 45 Update: labwc-tweaks-0.1.0-3.fc45

labwc-tweaks is a GUI configuration application for the labwc wayland compositor...

[SECURITY] Fedora 45 Update: gnote-51~beta-2.fc45

Gnote is a desktop note-taking application which is simple and easy to use. It lets you organize your notes intelligently by allowing you to easily link ideas together with Wiki style interconnects. It is a port of Tomboy to C++ and consumes fewer resources...

CVE-2026-103956

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956 Missing authentication for critical function in Loom for AWS

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956 Missing authentication for critical function in Loom for AWS

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956 Missing authentication for critical function in Loom for AWS

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

EUVD-2026-91770

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956

Loom for AWS versions before 1.6.1 are vulnerable to a critical flaw due to missing authentication for a critical function within the authentication dependency. In deployments where no identity provider is configured, remote actors can exploit this via any request to the application API to obtain...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference due to improper handling of messages in the multiplexed processor. An attacker can cause the application to crash by sending a message that cannot be routed. Remediation Upgrade thrift to version 0.25.0 or highe...

Uncontrolled Recursion

Overview apache/thrift is an Apache Thrift RPC system Affected versions of this package are vulnerable to Uncontrolled Recursion due to missing recursion-depth checks in the TProtocol::skipBinary process. An attacker can cause excessive resource consumption or application crash by sending special...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to missing recursion-depth checks in the TProtocol::skipBinary process. An attacker can cause excessive resource consumption or application crash by sending specially crafted data that triggers deep or infinit...

Allocation of Resources Without Limits or Throttling

Overview thrift is a Python bindings package for Apache Thrift. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the processing of skipped fields in incoming messages due to a failure to enforce recursion limits. An attacker can cause sta...

Allocation of Resources Without Limits or Throttling

Overview apache/thrift is an Apache Thrift RPC system Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the processing of skipped fields in incoming messages due to a failure to enforce recursion limits. An attacker can cause stack...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write through the THeaderTransport. An attacker can cause an application crash by sending specially crafted network traffic that triggers an out-of-bounds memory write. Remediation Upgrade thrift to version 0.25.0 or highe...