The vulnerability of the `drivers/media/i2c/tw9903.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/i2c/tw9903.c component of the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the osd_fault() function in the net/ceph/osd_client.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.

The vulnerability of the osdfault function in the net/ceph/osdclient.c module, which implements kernel networking functions in the Linux operating system, is related to state management errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

PT-2026-76775

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied GenerateResponse objects whose generate responses, choices, token ids, prompt logprobs, logprobs.content, top logprob...

PT-2026-76735

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU consumption through sqlparse.parse,...

PT-2026-76736

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group comments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAX GROUPING TOKENS guard, causing quadratic CPU consumption through sqlparse.parse and sqlparse.formatsql, strip...

PT-2026-76895

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.3.0 Description Stored cross-site scripting occurs when the getHTMLFromAtext function in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data...

The vulnerability of the usb_tx_block() function in the libertas component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the usbtxblock function in the libertas component of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-76779

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...

Security update for git-cliff (important)

openSUSE Security Update: Security update for git-cliff Announcement ID: openSUSE-SU-2026:0287-1 Rating: important References: 1248065 1274523 Cross-References: CVE-2025-55159 CVE-2026-25541 CVSS scores: CVE-2025-55159 SUSE: 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N...

Spring Office Hours Podcast: S5E20 - The Developer's Guide to AI with Danny Thompson

Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by Danny Thompson, Senior Developer Advocate at Atlassian, co-host of The Programming Podcast, and founder of The Commit Your Code Conference. Danny is also a co-author o...

Duplicati 2.2.0.3 - JWT Signing Key Leak

Exploit Title: Duplicati 2.2.0.3 - JWT Signing Key Leak Bypass leading to Token Forgery Date: 2026-06-23 Exploit Author: Gabriel Rodrigues TEXUGO from HAKAI Vendor Homepage: https://www.duplicati.com Software Link: https://github.com/duplicati/duplicati Version: = 2.2.0.3 commit 6ad921166 and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099781 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free in pcibusreleasedomainnr Commit c14f7ccc9f5d PCI: Assign PCI domain IDs b...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100116 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioti: fix heap overflow in getmanufinfo getmanufinfo reads le16tocpuromdesc-Size byt...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099929)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099929 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipcaeaddecryptdone tipcaeaddecrypt goes straight from...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100693 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix listxattr handling when the buffer is full BUG If an OCFS2 inode has both inline and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100574)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100574 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfatfinddirentry In exfatfinddirentry, the bufferhead...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100492 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a point...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100378 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmcrelease When calling usbtmcrelease, pending anchored UR...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100096 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssauth kref leak in gssallocmsg error path Commit 5940d1cf9f42 SUNRPC: Rebalance a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100551 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFONONAME decode error cleanup nfsd4decodesecinfononame currently initializes sinex...