PT-2026-60242

These are all security issues fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11263-1 freerdp-3.28.0-1.1 on GA media

These are all security issues fixed in the freerdp-3.28.0-1.1 package on the GA media of openSUSE Tumbleweed...

PYSEC-2026-2686 OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Affects - Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...

PYSEC-2026-2400 BoxLite has a Timeout Bypass Vulnerability

Summary BoxLite is a sandbox service that allows users to create lightweight virtual machines Boxes and run OCI containers within them. BoxLite allows users to configure a timeout for services running inside the virtual machine. When the timeout is triggered, BoxLite sends a signal to kill the...

PYSEC-2026-2636 mem0ai mem0 has an Improper Input Validation Issue

A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vectorstores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used...

PYSEC-2026-2561 Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

CVE-2026-14453 A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets

This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The messageconfirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to...

Decidim - Admin user search allows SQL injection through similarity-based sorting

Description The admin organization user search uses the untrusted term value inside raw SQL ORDER BY expressions. Because the value is interpolated before Rails sanitization is applied, a crafted search string is executed by PostgreSQL as part of the sort expression. Impact - Exploitation require...

The vulnerability of the nfsd_set_fh_dentry() function in the fs/nfsd/nfsfh.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfsdsetfhdentry function in the fs/nfsd/nfsfh.c module, which supports the Network File System in Linux kernels, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

OPENSUSE-SU-2026:11256-1 busybox-1.38.0-1.1 on GA media

These are all security issues fixed in the busybox-1.38.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57833

These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11254-1 chromedriver-150.0.7871.114-1.1 on GA media

These are all security issues fixed in the chromedriver-150.0.7871.114-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11252-1 wget-1.25.0-3.1 on GA media

These are all security issues fixed in the wget-1.25.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11251-1 traefik-3.7.7-1.1 on GA media

These are all security issues fixed in the traefik-3.7.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11249-1 python313-weasyprint-69.0-1.1 on GA media

These are all security issues fixed in the python313-weasyprint-69.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11250-1 qemu-11.0.2-1.1 on GA media

These are all security issues fixed in the qemu-11.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11246-1 libnfs-devel-6.0.2-1.1 on GA media

These are all security issues fixed in the libnfs-devel-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11245-1 GraphicsMagick-1.3.47-4.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.47-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11253-1 wpa_supplicant-2.11-7.1 on GA media

These are all security issues fixed in the wpasupplicant-2.11-7.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-33803 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...