CVE-2026-73505

A flaw was found in Oh My Posh. A local attacker could craft a malicious directory name containing a Go template expression. When the prompt renders within this directory or its subdirectories, the embedded template expression could execute arbitrary operating system commands as the current user...

MINI-6HP2-RWJ3-QXJ5

Bulletin has no description...

CVE-2026-19768

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

Security Bulletin: Code Injection Vulnerability in Code Validation Endpoint

Summary A code injection vulnerability was identified in the code validation endpoint that allowed authenticated users to execute arbitrary code on the server. The vulnerability existed in the validation logic which compiled and executed function definitions to check for import errors. Attackers...

CVE-2026-19768

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

CVE-2026-19768

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

CVE-2026-19768

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

EUVD-2026-58661

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

CVE-2026-19768

Devolutions PowerShell Universal versions 2026.2.3 and earlier are vulnerable to a Code Injection flaw in the settings feature. An authenticated user with settings management permissions can execute arbitrary PowerShell code by providing a crafted setting value that is not properly escaped when w...

GO-2026-4352 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, jobset-fips, rabbitmq-cluster-operator-fips, eck-operator-fips, buildah, crossplane-provider-gcp-fips, prometheus-node-exporter-fips, crossplane-provider-aws-elbv2, tempo-fips, argo-workflows, crossplane-provider-aws-macie2, keda-fips,...

GO-2024-3295 vulnerabilities

Vulnerabilities for packages: gh, wolfictl...

SUSE CVE-2026-73233

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp passes the xDisplacementFormula, yDisplacementFormula, and zDisplacementFormula fields of a...

Linux Distros Unpatched Vulnerability : CVE-2026-67986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially...

Microsoft PowerShell 7.4.x < 7.4.19 / 7.5.x < 7.5.10 / 7.6.x < 7.6.5 Multiple Vulnerabilities (August 2026)

The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.19, 7.5.x prior to 7.5.10, or 7.6.x prior to 7.6.5. It is, therefore, affected by multiple vulnerabilities: - Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code...

CVE-2026-19768: Improper Control of Generation of Code

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

PT-2026-72022

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

Microsoft PowerShell 7.4.x < 7.4.19 / 7.5.x < 7.5.10 / 7.6.x < 7.6.5 Multiple Vulnerabilities (macOS)

The version of Microsoft PowerShell installed on the remote macOS host is 7.4.x prior to 7.4.19, 7.5.x prior to 7.5.10, or 7.6.x prior to 7.6.5. It is, therefore, affected by multiple vulnerabilities: - Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execut...

DEBIAN-CVE-2026-73417

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings...

CVE-2026-73417

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings...