GHSA-96H3-5X6V-M776 Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path

Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a runnable vendor/bin command that points at that outside file. This is a path traversal and link...

VulnCheck KEV: CVE-2025-3759

Endpoint /cgi-bin-igd/netcoreset.cgi which is used for changing device configuration is accessible without authentication. This poses a significant security threat allowing for e.g: administrator account hijacking or AP password changing. The vendor was contacted early about this disclosure but d...

PT-2026-105164

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parse array primitive/2 for constructor 0x45 list0 returns an element with byte-width B = 0. The enclosing array32 parser at line 148 reads a 4-byte Count from the wire and loops Count times...

Rocky Linux 9 [CIQ] Security Update: openjpeg2 / openjpeg2-debuginfo / openjpeg2-debugsource / etc Multiple Vulnerabilities (crlsa-2025_7309)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257309 advisory. openjpeg: heap buffer overflow in bin/common/color.c CVE-2024-56826 openjpeg: heap buffer overflow in lib/openjp2/j2k.c CVE-2024-56827 Tenable has extracte...

Rocky Linux 8.6 [CIQ] Security Update: seabios / seabios-bin / seavgabios-bin Multiple Vulnerabilities (ciqsa-2026_0257)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260257 advisory. This advisory aggregates security fixes for the seabios SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409. Tenable ha...

Rocky Linux 8.6 [CIQ] Security Update: sgabios / sgabios-bin Multiple Vulnerabilities (ciqsa-2026_0258)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260258 advisory. This advisory aggregates security fixes for the sgabios SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7383, CVE-2024-7409. Tenable ha...

CentOS Linux 7 [TuxCare] Security Update: dmidecode (CENTOS7:CLSA-2026:1777996588)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777996588 advisory. - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via...

Rocky Linux 8.6 [CIQ] Security Update: sgabios / sgabios-bin Multiple Vulnerabilities (ciqsa-2026_0830)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260830 advisory. This advisory aggregates security fixes for the sgabios SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 8.6 [CIQ] Security Update: seabios / seabios-bin / seavgabios-bin Multiple Vulnerabilities (ciqsa-2026_0831)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260831 advisory. This advisory aggregates security fixes for the seabios SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1789647110)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789647110 advisory. - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. CVE-2026-42504 Note that Nessus...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1783955624)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783955624 advisory. - x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2025:1761325428)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1761325428 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8.8 [CIQ] Security Update: golang / golang-bin / golang-docs / golang-misc / golang-src / etc Multiple Vulnerabilities (ciqsa-2026_0324)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260324 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 8.8. It addresses 5 CVEs: CVE-2024-34155, CVE-2024-24791, CVE-2024-34158,...

Rocky Linux 9.6 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ciqsa-2026_1411)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261411 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 9.6. It addresses 50 CVEs: CVE-2026-27143, CVE-2025-61729, CVE-2019-6486,...

Rocky Linux 9.2 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ciqsa-2026_0424)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260424 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 9.2. It addresses 14 CVEs: CVE-2019-6486, CVE-2017-15042, CVE-2024-24791,...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2025:1765379145)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765379145 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8.6 [CIQ] Security Update: golang / golang-bin / golang-docs / golang-misc / golang-src / etc Multiple Vulnerabilities (ciqsa-2026_1004)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261004 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2024-34155, CVE-2024-24791, CVE-2024-34158,...

Malicious Package

Overview @selfpentest/bin-confusion is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CentOS Linux 8.5 [TuxCare] Security Update: dmidecode (CENTOS8.5:CLSA-2025:1755008582)

The CentOS Linux 8.5 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1755008582 advisory. - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode v...

CentOS Linux 8 [TuxCare] Security Update: dmidecode (CENTOS-STREAM8:CLSA-2026:1777040413)

The CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1777040413 advisory. - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmideco...