Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 — React Server Components RCE | CTF Writeup...

The vulnerability of Google Chrome’s PWA components allows attackers to install arbitrary PWA applications.

The vulnerability of Google Chrome’s PWA components is related to access control errors. Exploiting this vulnerability allows a remote attacker to install arbitrary PWA applications...

[SECURITY] [DSA 6206-1] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6206-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 11, 2026 https://www.debian.org/security/faq -...

OESA-2026-1895 gdk-pixbuf2 security update

gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites. Security Fixes: A flaw was found in the gdk-pixbuf library. This...

Exploit for CVE-2026-23869

⚡ CVE-2026-23869 — React2DoS Unauthenticated Remote Denial-o...

Exploit for CVE-2026-23869

⚡ CVE-2026-23869 — React2DoS Unauthenticated Remote Denial-o...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, flux-image-automation-controller, local-path-provisioner, nodetaint, newrelic-infra-operator, oras, flux-image-reflector-controller, tailscale, aws-load-balancer-controller, metacontroller, spire-server, nfs-subdir-external-provisioner, apko,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, crane, kargo, net-kourier, sbom-convert, postgres-operator, weaviate, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, hugo-extended, aws-application-networking-k8s, rancher-webhook, cilium,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, crane, kargo, net-kourier, sbom-convert, postgres-operator, weaviate, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, hugo-extended, aws-application-networking-k8s, rancher-webhook, cilium,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, flannel-cni-plugin, crane, kargo, net-kourier, sbom-convert, postgres-operator, weaviate, age, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, hugo-extended, aws-application-networking-k8s,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, crossplane-provider-aws-cognitoidentity-fips, kyverno-policy-reporter-plugins-trivy-fips, helm-diff-fips, crossplane-provider-aws-s3-fips, scorecard, contour, victoriametrics-operator-fips, custom-pod-autoscaler, terraform-fips, coredns, s5cmd...

@vitejs/plugin-rsc has a Denial of Service with React Server Components

Impact @vitejs/plugin-rsc vendors react-server-dom-webpack, which contained a vulnerability in versions prior to 19.2.4. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg Patches Upgrade immediately to @vitejs/[email protected] or...

GHSA-V457-WXVJ-P9W9 @vitejs/plugin-rsc has a Denial of Service with React Server Components

Impact @vitejs/plugin-rsc vendors react-server-dom-webpack, which contained a vulnerability in versions prior to 19.2.4. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg Patches Upgrade immediately to @vitejs/[email protected] or...

GHSA-Q4GF-8MX6-V5V3 Next.js has a Denial of Service with Server Components

A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as CVE-2026-23869. You can read more about this advisory our this...

Next.js has a Denial of Service with Server Components

A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as CVE-2026-23869. You can read more about this advisory our this...

EUVD-2026-20584

React Server Components have a Denial of Service Vulnerability...

GHSA-479C-33WC-G2PG React Server Components have a Denial of Service Vulnerability

Impact A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack versions 19.0.0, 19.1.0 and 19.2.0. The vulnerability is triggered by sending specially crafted HTTP requests...

Exploit for CVE-2026-23869

CVE-2026-23869 - Proof of Concept PoC Description This...

CVE-2026-35644 OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots

OpenClaw before 2026.3.22 contains an information disclosure vulnerability that allows attackers with operator.read scope to expose credentials embedded in channel baseUrl and httpUrl fields. Attackers can access gateway snapshots via config.get and channels.status endpoints to retrieve sensitive...