CLSA-2026-1792526968 TuxCare security update for @babel/helper-remap-async-to-generator (1 CVE)

TuxCare rebuilt @babel/helper-remap-async-to-generator to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792526966 TuxCare security update for @babel/helper-remap-async-to-generator (1 CVE)

TuxCare rebuilt @babel/helper-remap-async-to-generator to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792526967 TuxCare security update for @babel/helper-remap-async-to-generator (2 CVEs)

TuxCare rebuilt @babel/helper-remap-async-to-generator to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792526962 TuxCare security update for @babel/helper-remap-async-to-generator (1 CVE)

TuxCare rebuilt @babel/helper-remap-async-to-generator to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CVE-2026-89874

A flaw was found in the Linux kernel's v4l2-async media subsystem. When creating ancillary media links, the v4l2asyncmatchnotify function attempts to delete an unlinked entry if the link creation fails. This can lead to a null pointer dereference, potentially causing a system crash. A local...

CLSA-2026-1792508343 TuxCare security update for @babel/plugin-transform-async-to-generator (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-async-to-generator to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792508340 TuxCare security update for @babel/plugin-transform-async-to-generator (1 CVE)

TuxCare rebuilt @babel/plugin-transform-async-to-generator to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792508336 TuxCare security update for @babel/plugin-transform-async-to-generator (1 CVE)

TuxCare rebuilt @babel/plugin-transform-async-to-generator to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792508335 TuxCare security update for @babel/plugin-transform-async-to-generator (1 CVE)

TuxCare rebuilt @babel/plugin-transform-async-to-generator to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792500787 TuxCare security update for @babel/plugin-proposal-async-generator-functions (2 CVEs)

TuxCare rebuilt @babel/plugin-proposal-async-generator-functions to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792500785 TuxCare security update for @babel/plugin-proposal-async-generator-functions (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-async-generator-functions to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792500782 TuxCare security update for @babel/plugin-proposal-async-generator-functions (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-async-generator-functions to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792500783 TuxCare security update for @babel/plugin-proposal-async-generator-functions (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-async-generator-functions to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CVE-2026-77930

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

CVE-2026-77930

EvoScientist versions 0.1.0 before 0.2.5 are vulnerable to an approval bypass vulnerability. The root cause is the use of async sub-agents that lack an interrupt_on gate, which allows attackers to execute arbitrary host shell commands. By planting malicious instructions in ingested content, such ...

CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

EUVD-2026-104687

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

aiobotocore (>=0.4.0, <=0.4.1), async-patterns (0.2.0) +7 more potentially affected by CVE-2026-111064 via aiohttp (2.2.0)

aiohttp PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aiobotocore =0.4.0, =0.1.1, =0.2.2, =0.48.0, =0.4.1b2, =0.5.2b0, =0.1.0a88, =0.1.0b10 Source cves: CVE-2026-111064 Source advisory:...