PYSEC-2026-1615 Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

Impact In Synapse versions before 1.120.1, enabling the dynamicthumbnails option or processing a specially crafted request could trigger the decoding and thumbnail generation of uncommon image formats, potentially invoking external tools like Ghostscript for processing. This significantly expands...

MAL-2026-7081 Malicious code in @louisvuitton/configurator-common-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1261 Microsoft Common Data Model SDK Denial of Service Vulnerability

Microsoft Common Data Model SDK Denial of Service Vulnerability...

DEBIAN-CVE-2026-53588

Bulletin has no description...

DEBIAN-CVE-2026-45092

Bulletin has no description...

CVE-2026-8377

Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...

EUVD-2026-42019

Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...

CVE-2026-8377 Improper Authorization in Armiya Technologies' Access Control System

Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...

CVE-2026-36180

creationtimestamp| type| source ---|---|--- 2026-07-06 11:24:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxy52z6su2g...

CVE-2026-53131

creationtimestamp| type| source ---|---|--- 2026-07-06 06:48:59+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

SUSE CVE-2026-49825

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

CVE-2021-4447

creationtimestamp| type| source ---|---|--- 2026-07-05 19:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpwbilun7q2i...

CVE-2024-10230

creationtimestamp| type| source ---|---|--- 2026-07-05 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpvlp7vtwv2s...

CVE-2026-14648

creationtimestamp| type| source ---|---|--- 2026-07-05 00:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpubwlkocb2t...

BELL-CVE-2026-57585

Bulletin has no description...

BELL-CVE-2026-47247

Bulletin has no description...

CVE-2026-14607

creationtimestamp| type| source ---|---|--- 2026-07-03 22:14:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprl2pm32s2z...

CVE-2026-40914 vulnerabilities

Vulnerabilities for packages: wildfly...

SUSE-SU-2026:2742-1 Security update for pacemaker

This update for pacemaker fixes the following issue - CVE-2026-10649: denial of service via integer overflow in remote message decompression bsc1268381...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the PatternParser process. An attacker can access sensitive files or interact with internal systems by submitting crafted XML data that triggers external entity resolution. Details XXE Injection is ...