1149 matches found
CVE-2026-76962: Missing Authorization
SAP S/4HANA Manage Bank Chains app does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially crafted requests to delete specific entries that should not be accessible to them. This results in a low impact on...
CLEANSTART-2026-QE70350 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the tekton-chains-fips package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...
sshconfig-lint v0.5.0
sshconfig-lint One engine for every place your SSH config changes. sshconfig-lint finds semantic mistakes in OpenSSH client configs: duplicate hosts, broken identity paths, unsafe options, weak algorithms, wildcard ordering, and tangled Include chains. Use the same rule codes locally, in Git hook...
DoS (Denial of Service) js-yaml Dependency in Jira Service Management Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVS...
Security update for c-ares (important)
openSUSE security update: security update for c-ares ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21721-1 Rating: important References: bsc1270416 bsc1276290 bsc1276291 Cross-References: CVE-2026-33630 CVE-2026-69184 CVE-2026-69186 CVSS scores:...
CLEANSTART-2026-GR84261 Security fixes in tekton-chains-fips 0.24.0-r1
Package tekton-chains-fips version 0.24.0-r1 fixes 26 vulnerabilities: CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859...
CLEANSTART-2026-NJ73427 Security fixes in tekton-chains-fips 0.25.2-r1
Package tekton-chains-fips version 0.25.2-r1 fixes 31 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...
CLEANSTART-2026-NZ51335 Security fixes in tekton-chains-fips 0.26.5-r1
Package tekton-chains-fips version 0.26.5-r1 fixes 25 vulnerabilities: CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859...
CLEANSTART-2026-RM68806 Security fixes in tekton-chains 0.26.5-r1
Package tekton-chains version 0.26.5-r1 fixes 15 vulnerabilities: ghsa-gcjh-h69q-9w9g, CVE-2026-49478, CVE-2026-48702, CVE-2026-54787, CVE-2026-49834...
CLEANSTART-2026-HA54107 Security fixes in tekton-chains 0.25.2-r1
Package tekton-chains version 0.25.2-r1 fixes 23 vulnerabilities: ghsa-gcjh-h69q-9w9g, ghsa-pmwq-pjrm-6p5r, CVE-2026-49478, CVE-2026-48702, CVE-2026-49834...
[SECURITY] [DLA 4761-1] libnet-dns-perl security update
Debian LTS Advisory DLA-4761-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 30, 2026 https://wiki.debian.org/LTS Package : libnet-dns-perl Version : 1.29-1+deb11u1 1.36-1+deb12u1 CVE ID : CVE-2026-64194 Debian Bug : 1142503 Steffen Ullrich discovered that...
Debian dla-4761 : libnet-dns-perl - security update
The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4761 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4761-1 [email protected]...
CVE-2026-55220
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...
CVE-2026-55220 Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: EROFs: Avoid linking hooked chains to prevent loops in deduplicated compressed images. After subjecting EROFS to heavy stress using several images that included a handcrafted image with repeated patterns for over 46 days, I...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: apisix-ingress-controller, azure-service-operator, datadog-agent, flux-notification-controller, cert-manager, cluster-api-helm-controller, caddy, cluster-api-ipam-provider-in-cluster, kwok, yunikorn-k8shim, kapp-controller, kubeflow-pipelines, kyverno, calico,...
GO-2026-5711 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-chains, tekton-chains-fips, tkn, tekton-pipelines-fips, tkn-fips...
GO-2026-4730 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-chains, tekton-chains-fips, tkn, tekton-pipelines-fips, tkn-fips...