CLEANSTART-2026-GW29124 Security fix for CVE-2024-0874 applied in: kubernetes-dns-node-cache-fips 1.26.0-r1

Security vulnerability affects the kubernetes-dns-node-cache-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WO45616 Security fix for CVE-2025-47950 applied in: kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache-fips 1.26.0-r1

CVE-2025-47950 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XJ00133 Security fix for CVE-2023-28452 applied in: kubernetes-dns-node-cache-fips 1.26.0-r1

Security vulnerability affects the kubernetes-dns-node-cache-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BB24925 Security fix for CVE-2024-53259 applied in: kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8

CVE-2024-53259 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC13907 Security fix for CVE-2025-68151 applied in: kubernetes-dns-node-cache 1.23.1-r0, kubernetes-dns-node-cache 1.24.1-r1, kubernetes-dns-node-cache 1.25.0-r8

CVE-2025-68151 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-79713

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79713 Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79713

Breeze Cache (WordPress plugin, versions 1.2.5 through 2.5.14 ) is vulnerable to unauthenticated cache poisoning caused by a missing set of tracking-related query parameters in its page-cache key . Because pages requested with those parameters are still cached and served from the clean URL's cach...

CVE-2026-79713 Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

EUVD-2026-82684

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

PYSEC-2026-4011 Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

downloadwheel runs pip download and hands the result straight to the seeder, with nothing checking the bytes it gets back. The embedded pip and setuptools wheels carry a BUNDLESHA256 that virtualenv checks on every load, but a wheel fetched over the network for the periodic-update feature or the...

SUSE CVE-2026-90161

In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlaced pclusters should be block-aligned, and ztailpacking interlaced pclusters should be invalid at all. Currently, mkfs.erofs won't generate any interlaced...

SUSE CVE-2026-92487

In the Linux kernel, the following vulnerability has been resolved: exfat: fix validsize extension over a shared writable mapping When a shared writable mapping has its validsize extended by a buffered write or a page fault, exfat zeroes the page-cache gap below the new validsize. A store through...

SUSE CVE-2026-93204

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadvdatentryadd, it is done using a simple copy function. A parallel reader might only see parts of this update. In worst case, the reader is...

PT-2026-105772

download wheel runs pip download and hands the result straight to the seeder, with nothing checking the bytes it gets back. The embedded pip and setuptools wheels carry a BUNDLE SHA256 that virtualenv checks on every load, but a wheel fetched over the network for the periodic-update feature or th...

PT-2026-95713

Name of the Vulnerable Software and Affected Versions Vinyl Cache versions prior to 9.0.2 Description A workspace buffer overflow exists in the .upper and .lower string type methods of the VCL Varnish Configuration Language. This issue can be leveraged as a remote denial of service DoS vector,...

PT-2026-100396

Security vulnerability affects the kubernetes-dns-node-cache package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100463

Security vulnerability affects the kubernetes-dns-node-cache package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101468

Security vulnerability affects the kubernetes-dns-node-cache-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95590

Name of the Vulnerable Software and Affected Versions http-cache-semantics versions prior to 4.2.1 Description A cache validation issue exists in the varyMatches function. The function fails to properly validate Vary header wildcards because it uses byte-for-byte string comparison. This allows...