UBUNTU-CVE-2026-114136

Django REST framework is a toolkit for building Web APIs. From 3.6.4 u...

UBUNTU-CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0...

UBUNTU-CVE-2026-114138

Django REST framework is a toolkit for building Web APIs. Prior to 3.1...

CVE-2026-114136

Django REST framework is a toolkit for building Web APIs. From 3.6.4 u...

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0...

UBUNTU-CVE-2026-77630

pupnp is an SDK for development of UPnP device and control point appli...

UBUNTU-CVE-2026-55862

pupnp is an SDK for development of UPnP device and control point appli...

PT-2026-122055

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF XDP on a striding RQ, mlx5e defers releasing XSK buffers until an MPWQE is refilled. If XSK allocation then returns -ENOMEM, actual wq head is not advanced...

UBUNTU-CVE-2026-96424

Incorrect DBus policy for lomiri-upload-manager part of lomiri-downlo...

UBUNTU-CVE-2026-114135

Jupyter Server is the backend for Jupyter web applications. From 2.0.0...

CVE-2026-114135

Jupyter Server is the backend for Jupyter web applications. From 2.0.0...

CVE-2026-113776

virtualenv is a tool for creating isolated virtual python environments...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger...

UBUNTU-CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger...

PT-2026-122134

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint GET /api/v1/index/solrField/spatial/search concatenates the user-supplied region query parameter directly into a Sol...

PT-2026-121940

@pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass the isUrlSafeToFetch denylist in getB64BasePdf. Attackers can supply basePdf URLs using IPv4-mapped IPv6, ::, NAT64 or localhost alias hostnames to read loopback, internal o...

PT-2026-122018

In the Linux kernel, the following vulnerability has been resolved: ip6 gre: remove obsolete ERSPAN PMTU update A tc tunnel key action can attach a METADATA IP TUNNEL dst to an skb, and mirred can redirect it to a native ip6erspan device. The legacy PMTU update in ip6erspan tunnel xmit treats tha...

CVE-2026-77630

pupnp is an SDK for development of UPnP device and control point appli...

PT-2026-122443

Summary installBazaarPlugin and the equivalent endpoints for widgets/icons/templates/themes accept packageName, repoURL, and repoHash as independent request fields with no validation that they refer to the same package. packageName alone determines the install destination; repoURL/repoHash alone...

PT-2026-122415

Summary /api/filetree/authFilePublishAccess is registered with CheckAuth only and is reachable anonymously. It never sets a failure code, so its outcome is signalled entirely by the response message and by whether a Set-Cookie header is present. Those two signals differ across access tiers, which...