CVE-2026-9678 vulnerabilities

Vulnerabilities for packages: pelias-api, langfuse-fips, kibana, code-server, langfuse...

GHSA-4XPC-PV4P-PM3W vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: pelias-api, kibana, code-server, node-gyp, prism, npm, haraka, actions-runner...

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: pelias-api, kibana, code-server, node-gyp, prism, npm, haraka, actions-runner...

GHSA-35P6-XMWP-9G52 vulnerabilities

Vulnerabilities for packages: pelias-api, kibana, code-server, node-gyp, prism, npm, haraka, actions-runner...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: pelias-api, kibana, code-server, node-gyp, prism, npm, haraka, actions-runner...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: pelias-api, kibana, code-server, node-gyp, prism, npm, haraka, actions-runner...

GHSA-P88M-4JFJ-68FV vulnerabilities

Vulnerabilities for packages: pelias-api, kibana, code-server, node-gyp, prism, npm, haraka, actions-runner...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: pelias-api, kibana, code-server, node-gyp, prism, npm, haraka, actions-runner...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: pelias-api, kibana, code-server, node-gyp, prism, npm, haraka, actions-runner...

CVE-2026-56410

A flaw was found in libexpat. Specifically, the xmlwf utility contains an integer overflow vulnerability in its resolveSystemId function. This flaw could be exploited by an attacker to potentially gain unauthorized access to sensitive information or execute arbitrary code, leading to a compromise...

CVE-2026-49261

A flaw was found in MariaDB server. When the wsrepnotifycmd feature is enabled, a remote attacker could exploit this vulnerability by embedding shell commands in the name of a joiner node. This could lead to arbitrary code execution on the server, allowing the attacker to take full control of the...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

redis: RESTORE invalid memory access may allow remote code execution

A flaw was found in Redis. An authenticated attacker with permission to execute the RESTORE command can send a crafted serialized payload that may lead to an invalid memory access due to an improper validation of the serialized values. This flaw can cause the server to crash and may allow arbitra...

vim: Vim: Command injection allows arbitrary code execution via malicious tag files

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedd...

samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

Important: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

samba: Remote Code Execution in SAMR

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...

Malicious code in ts-wross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dae43b7ff77748f10ae5faf6d87b7d63552e5629a37c931ea2c0de3539b469 Package is published under the name ts-wross but its package.json claims authorship by Michael Mclaughlin [email protected] and points its repository...

MAL-2026-6278 Malicious code in ts-wross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dae43b7ff77748f10ae5faf6d87b7d63552e5629a37c931ea2c0de3539b469 Package is published under the name ts-wross but its package.json claims authorship by Michael Mclaughlin [email protected] and points its repository...