GHSA-C6W9-5G5J-JH2P Directus: Authorization-dependent response served from unsegmented cache key

Summary When response caching is enabled CACHEENABLED=true, the cache-key derivation in api/src/utils/get-cache-key.ts includes only version, path, query, and accountability.user plus a conditional ip. Authorization context beyond user share, role, roles, admin, app, policies is not part of the...

PT-2026-61476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the zero point—the file position from which the system assumes the server will return zeros to avoid unnecessary reads—is updated incorrectly...

PT-2026-67317

Name of the Vulnerable Software and Affected Versions better-auth versions prior to 1.4.9 Description A two-factor authentication 2FA bypass occurs when session.cookieCache is enabled. The issue arises because the session generated during the initial sign-in step may be cached as valid before the...

EUVD-2022-43092

Malicious code in bioql PyPI...

UBUNTU-CVE-2020-11098

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyphcacheput. This affects all FreeRDP clients with +glyph-cache option enabled This is fixed in version 2.1.2...