EUVD-2026-12932

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. While most alignment records store DNA sequence and quality values, the format also allows them to om...

CVE-2026-31964 HTSlib CRAM decoder has a NULL Pointer Dereference

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. While most alignment records store DNA sequence and quality values, the format also allows them to om...

CVE-2026-31962

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While most alignment records store DNA sequence and quality values, the format also allows them to omit this data in certain cases to save space. Due to...

CVE-2026-23249

In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating two btrees The free space and inode btree repair functions will rebuild both btrees at the same time, after which it needs to evaluate both btrees to confirm that the corruptions a...

CVE-2026-31962 HTSlib CRAM reader has heap buffer overflow due to improper validation of input

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While most alignment records store DNA sequence and quality values, the format also allows them to omit this data in certain cases to save space. Due to...

EUVD-2026-12923

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While most alignment records store DNA sequence and quality values, the format also allows them to omit this data in certain cases to save space. Due to...

CVE-2025-71269

CVE-2025-71269: The Linux kernel Btrfs fallback path for inline extents could free reserved qgroup data incorrectly when ENOSPC occurred. The fix ensures that reserved qgroup data is freed in __cow_file_range_inline() only if the fallback path is not taken (ret > 0). This change prevents freei...

Important: Red Hat Security Advisory: Red Hat Quay 3.12.15

Red Hat Quay 3.12.15 is now available with bug fixes. Quay 3.12.15...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Malicious code in test-bugbounty-package-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ee2c6095d9dfd6bdd4945e804a736035b9e29d4265e6a0e455aff026911be7 The package test-bugbounty-package-6 was found to contain malicious code...

Malicious code in test-bugbounty-package-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f7339bb0bc55d33f83cf6bc6b2aed69072dc0de2c1fb416de6d8b67816e858 The package test-bugbounty-package-9 was found to contain malicious code...

MAL-2026-1863 Malicious code in test-bugbounty-package-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f7339bb0bc55d33f83cf6bc6b2aed69072dc0de2c1fb416de6d8b67816e858 The package test-bugbounty-package-9 was found to contain malicious code...

MAL-2026-1862 Malicious code in test-bugbounty-package-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ee2c6095d9dfd6bdd4945e804a736035b9e29d4265e6a0e455aff026911be7 The package test-bugbounty-package-6 was found to contain malicious code...

Malicious code in signalk-poc-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf69e2f2bf99c9fcd93e12139a947e034130e9f90b30def5cf03d008c3f40330 The package signalk-poc-bug was found to contain malicious code...

MAL-2026-1846 Malicious code in signalk-poc-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf69e2f2bf99c9fcd93e12139a947e034130e9f90b30def5cf03d008c3f40330 The package signalk-poc-bug was found to contain malicious code...

Malicious code in signalk-bug-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0adf060e6869ffe604897fcdb22f8c2d7b1b88465e935b0f2755767748ae363 The package signalk-bug-poc was found to contain malicious code...

MAL-2026-1845 Malicious code in signalk-bug-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0adf060e6869ffe604897fcdb22f8c2d7b1b88465e935b0f2755767748ae363 The package signalk-bug-poc was found to contain malicious code...

MAL-2026-1695 Malicious code in company-billing-sdk-bugbounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e0804c0e591fea0c08e9a93b6aaff5803abac7fd387da23dbfb557009397e6 The package company-billing-sdk-bugbounty was found to contain malicious code...

EUVD-2026-12811

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in perfmmap Syzkaller reported a refcountt: addition on 0; use-after-free warning in perfmmap. The issue is caused by a race condition between a failing mmap setup and a concurrent mm...

EUVD-2026-12800

The Yoast Duplicate Post plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clonebulkactionhandler and republishrequest functions in all versions up to, and including, 4.5. This makes it possible for authenticated attackers, with...