UBUNTU-CVE-2026-114138

Django REST framework is a toolkit for building Web APIs. Prior to 3.1...

CVE-2026-114136

Django REST framework is a toolkit for building Web APIs. From 3.6.4 u...

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0...

UBUNTU-CVE-2026-77630

pupnp is an SDK for development of UPnP device and control point appli...

PT-2026-122055

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF XDP on a striding RQ, mlx5e defers releasing XSK buffers until an MPWQE is refilled. If XSK allocation then returns -ENOMEM, actual wq head is not advanced...

UBUNTU-CVE-2026-96424

Incorrect DBus policy for lomiri-upload-manager part of lomiri-downlo...

UBUNTU-CVE-2026-114135

Jupyter Server is the backend for Jupyter web applications. From 2.0.0...

CVE-2026-114135

Jupyter Server is the backend for Jupyter web applications. From 2.0.0...

CVE-2026-113776

virtualenv is a tool for creating isolated virtual python environments...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger...

UBUNTU-CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger...

PT-2026-122134

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint GET /api/v1/index/solrField/spatial/search concatenates the user-supplied region query parameter directly into a Sol...

PT-2026-121940

@pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass the isUrlSafeToFetch denylist in getB64BasePdf. Attackers can supply basePdf URLs using IPv4-mapped IPv6, ::, NAT64 or localhost alias hostnames to read loopback, internal o...

PT-2026-122018

In the Linux kernel, the following vulnerability has been resolved: ip6 gre: remove obsolete ERSPAN PMTU update A tc tunnel key action can attach a METADATA IP TUNNEL dst to an skb, and mirred can redirect it to a native ip6erspan device. The legacy PMTU update in ip6erspan tunnel xmit treats tha...

CVE-2026-77630

pupnp is an SDK for development of UPnP device and control point appli...

PT-2026-122443

Summary installBazaarPlugin and the equivalent endpoints for widgets/icons/templates/themes accept packageName, repoURL, and repoHash as independent request fields with no validation that they refer to the same package. packageName alone determines the install destination; repoURL/repoHash alone...

Linux Distros Unpatched Vulnerability : CVE-2026-98950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - flowdissector: avoid u16 truncation of hlen in bpfflowdissect bpfflowdissect sanitizes the offsets returned by the BPF program with clamptu16, ..., hlen. If hle...

Linux Distros Unpatched Vulnerability : CVE-2026-98983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed...

Linux Distros Unpatched Vulnerability : CVE-2026-99052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc...

Linux Distros Unpatched Vulnerability : CVE-2026-99005

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/gt: Unmask interrupts only when ACTIVE is true There is a small race window between intelrpsboost reading a stale ACTIVE state and queuing rps-work,...