PT-2026-79648

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error out for zero quota goal target values Patch series "mm/damon: avoid division by zero from damos quota score". DAMON SAMPLE MTIER and DAMON LRU SORT allow the user to trigger division by zero in damos...

PT-2026-79650

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru sort: error out for 10000 active mem bp damos quota score can trigger division by zero if the target value is zero. DAMON LRU SORT lets users set the target value for the hot memory scheme via active mem bp parameter...

PT-2026-79578

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.3 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

ROOT-APP-NPM-CVE-2026-59871 CVE-2026-59871 in tar - Patched by Root

Root has patched CVE-2026-59871 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54273 CVE-2026-54273 in aiohttp - Patched by Root

Root has patched CVE-2026-54273 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54278 CVE-2026-54278 in aiohttp - Patched by Root

Root has patched CVE-2026-54278 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-22815 CVE-2026-22815 in aiohttp - Patched by Root

Root has patched CVE-2026-22815 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-36187 CVE-2020-36187 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36187 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-20330 CVE-2019-20330 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-20330 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2019-14379 CVE-2019-14379 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-14379 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-28417 CVE-2026-28417 in vim - Patched by Root

Root has patched CVE-2026-28417 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-55693 CVE-2026-55693 in vim - Patched by Root

Root has patched CVE-2026-55693 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-47162 CVE-2026-47162 in vim - Patched by Root

Root has patched CVE-2026-47162 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-39881 CVE-2026-39881 in vim - Patched by Root

Root has patched CVE-2026-39881 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-23358 CVE-2021-23358 in underscore - Patched by Root

Root has patched CVE-2021-23358 in the underscore package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41850 CVE-2026-41850 in org.springframework:spring-expression - Patched by Root

Root has patched CVE-2026-41850 in the org.springframework:spring-expression package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41845 CVE-2026-41845 in org.springframework:spring-core - Patched by Root

Root has patched CVE-2026-41845 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-56405 CVE-2026-56405 in expat - Patched by Root

Root has patched CVE-2026-56405 in the expat package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-74546

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically within the adt7470 driver. A local attacker could exploit a time-of-check to time-of-use TOCTOU race condition. If fan data becomes zero between a validation check and a conversion operation, it can lead to a...

CVE-2026-74504

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer component. An unprivileged local user with access to ALSA timer and sequencer devices can trigger a division-by-zero error. This occurs by manipulating the ALSA timer's hardware resolution, leading to an integ...