CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50248 affecting package unbound for versions less than 1.25.2-1

CVE-2026-50248 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: Due to the use of WebSphere Application Server Liberty, IBM Tivoli Application Dependency Discovery Manager is affected by multiple vulnerabilities

Summary IBM Tivoli Application Dependency Discovery Manager bundles WebSphere Application Server Liberty, vulnerabilities has been remediated in an e-fix CVE-2026-11541, CVE-2026-9071, CVE-2026-9320, CVE-2026-8646, CVE-2026-10852, CVE-2026-8858, CVE-2026-9072 Vulnerability Details...

GHSA-W867-JM58-P9PV n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

Impact An authenticated user can repeatedly upload files to the data-table upload endpoint, bypassing the per-request quota check, which does not account for files already written to the shared temporary directory. This causes temporary files to accumulate on disk until the periodic cleanup runs,...

CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15

CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1

CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42770 affecting package openssl for versions less than 3.3.7-4

CVE-2026-42770 affecting package openssl for versions less than 3.3.7-4. A patched version of the package is available...

CVE-2026-59886 affecting package python-pyasn1 for versions less than 0.4.8-3

CVE-2026-59886 affecting package python-pyasn1 for versions less than 0.4.8-3. A patched version of the package is available...

CVE-2026-11856 affecting package cmake for versions less than 3.30.3-15

CVE-2026-11856 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

CVE-2026-45447 affecting package openssl for versions less than 3.3.7-4

CVE-2026-45447 affecting package openssl for versions less than 3.3.7-4. A patched version of the package is available...

CVE-2026-38755 affecting package busybox for versions less than 1.36.1-25

CVE-2026-38755 affecting package busybox for versions less than 1.36.1-25. A patched version of the package is available...

CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3

CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3. A patched version of the package is available...

CVE-2026-9079 affecting package cmake for versions less than 3.30.3-15

CVE-2026-9079 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

CVE-2026-8458 affecting package cmake for versions less than 3.30.3-15

CVE-2026-8458 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

CVE-2026-16628 oclif JIT Plugin Entry child_process.exec os command injection

A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function childprocess.exec of the component JIT Plugin Entry Handler. Performing a manipulation of the argument jitPlugins results in os command injection. The attack is only possible with local access. The...

CVE-2026-16628

The CVE-2026-16628 issue affects the oclif project up to version 4.23.16. The vulnerability lies in the JIT Plugin Entry Handler, where manipulating the jitPlugins argument allows local os command injection via child_process.exec. The attack requires local access; the exploit is public. A patch e...

MINI-23Q9-32CF-G43F

Bulletin has no description...

CVE-2026-46917

A flaw was found in OpenJDK. The DTLS implementation is open to two different DoS attacks...

CVE-2026-47021

A flaw was found in OpenJDK. The regex defined in XbmImageDecoder matchRegex is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking...

CVE-2026-47058

A flaw was found in OpenJDK. 1 DataView getter/setter methods use absolute ByteBuffer indexing and ignore the offset, allowing read and write to memory outside its intended window. 2 Missing bounds check in the DataView constructor fails to validate the capacity...