EulerOS 2.0 SP11 : openssl (EulerOS-SA-2026-4354)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mode...

The Right to Be Forgotten under Correlation: Privacy-Utility Tradeoffs

We study privacy-preserving algorithms that redact information from a correlated dataset. The goal is to reduce the information leakage about sensitive parts. We analytically characterize the optimal tradeoff between privacy leakage through correlation and utility number of redactions for local...

CVE-2026-97691: Improper Access Control

Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2026-08-10-c0cb7ae, a malicious user can, in rare cases, perform unauthorized reading of deployment information from a Convex...

EulerOS 2.0 SP13 : openssl (EulerOS-SA-2026-4169)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

EulerOS 2.0 SP13 : shim (EulerOS-SA-2026-4107)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflo...

Important: python-pymongo

Issue Overview: A flaw was found in pymongo. An integer overflow exists in the bundled native extension for Binary JSON BSON document encoding when processing an unusually large amount of data. An unprivileged attacker who can submit oversized data to an application for encoding can trigger an...

EulerOS 2.0 SP11 : kata-containers (EulerOS-SA-2026-4330)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

EulerOS 2.0 SP13 : kata-containers (EulerOS-SA-2026-4146)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

CVE-2026-107437: Use of Hard-coded Credentials

GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...

PT-2026-110914

Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2026-08-10-c0cb7ae, a malicious user can, in rare cases, perform unauthorized reading of deployment information from a Convex...

EulerOS 2.0 SP13 : kata-containers (EulerOS-SA-2026-4055)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

EulerOS 2.0 SP11 : kata-containers (EulerOS-SA-2026-4239)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

EulerOS 2.0 SP13 : gdb (EulerOS-SA-2026-4046)

According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker process...

EulerOS 2.0 SP11 : golang (EulerOS-SA-2026-4232)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 If a trusted template...

Amazon Linux 2023 : python3-bson, python3-pymongo, python3-pymongo-gridfs (ALAS2023-2026-3155)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3155 advisory. A flaw was found in pymongo. An integer overflow exists in the bundled native extension for Binary JSON BSON document encoding when processing an unusually large amount of data. An unprivileged attacke...

PT-2026-110795

Name of the Vulnerable Software and Affected Versions rebar3 versions 3.9.1 through 3.27.2 hex versions 2.1.0 through 2.5.1 hex core versions 0.1.0 through 0.19.9 Description Improper handling of highly compressed data leads to a data amplification issue where an untrusted repository mirror or a...

TencentOS Server 4: gdb (TSSA-2026:1081)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1081 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: crash (TSSA-2026:1082)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1082 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-105274: Improper Handling of Highly Compressed Data (Data Amplification)

Improper Handling of Highly Compressed Data Data Amplification vulnerability in hexpm hexcore allows an untrusted repository mirror, or a server answering hexcore's API requests, to exhaust the memory of the Erlang VM running hexcore. The same code is vendored in Hex mixhexrepo, mixhexapi and...

ALSA-2026:80504 Important: jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile binary JSON, XML, CBOR another kind of binary JSON, YAML. Security Fixes: com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU...