ROS-20261023-73-0179

The vulnerability in python-multipart is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261021-73-0019

The vulnerability in rubygem-mail is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from improper handling of subpartitionscpus conflicts in the remotepartitionenable function. By replacing the error check with WARNONONCE, remote partitions can still be enabled on CPUs that are already...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drbd: add missing krefget in handlewriteconflicts When two-primaries is enabled, DRBD attempts to detect “concurrent” writes and handle write conflicts so that even if both nodes write to the same sector simultaneously, they end ...

OpenBao Secret Encryption Management System DoS

The vulnerability of the OpenBao encryption and secret management system is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE-SU-2026:22950-1 Security update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21

This update for go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21 fixes the following issues: Changes in go compilers: - Switch from update-alternatives to new method. - Packaging improvements: Revert %ghost /usr/bin/go...

OESA-2026-3156 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: drbd: add missing krefget in handlewriteconflicts With two-primaries enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even i...

mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculatedataframehash of the file mlrun/utils/helpers.py of the component DataFrame Hash Handler. The manipulation leads to use of weak hash. The attack can only be performed from a local...

ROS-20260709-73-0038

The vulnerability in openbao is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a remote attacker to cause service failures...

GHSA-3W32-23WJ-RXG3 Craft CMS Vulnerable to Unauthorized Deletion of Destination Folders During Forced Moves

We have identified an authorization issue in Craft CMS where a forced folder move can delete a conflicting destination folder without destination delete permission. Description Craft CMS’s craft\controllers\AssetsController::actionMoveFolder supports moving an asset folder into a destination...

Missing Authorization

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Missing Authorization in the actionMoveFolder process. An attacker can remove destination folders and their contents without having delete permissions on the destination by initiating a force...

DEBIAN-CVE-2026-53324

In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pciname for debugfs directory naming Use pcinamepdev for the per-device debugfs directory instead of hardcoded "0" for PFs and pcislotnamepdev-slot for VFs. The previous approach had two issues: 1. pcislotname...

Next.js Interpretation Conflict

The vulnerability of the Next.js web application development software platform is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculatedataframehash of the file mlrun/utils/helpers.py of the component DataFrame Hash Handler. The manipulation leads to use of weak hash. The attack can only be performed from a local...

Rack Modular Interface Bypass

The vulnerability of the Ruby-based Rack web server’s modular interface is related to the occurrence of interpretation conflicts when processing HTTP headers’ names and values. Exploiting this vulnerability allows a remote attacker to bypass security restrictions...

libexpat security vulnerabilities

libexpat is a streaming XML parser written in C language by the libexpat team. Versions of libexpat prior to 2.8.1 had security vulnerabilities, which stemmed from the computational complexity of attribute name conflict checks. These vulnerabilities could potentially lead to denial-of-service...

CVE-2026-2708

A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soupmessageheadersappendcommon function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker...

CLSA-2026-1776952176 ruby: Fix of 4 CVEs

CVE-2024-39908: fix ReDoS in REXML parser for repeated / character reference payloads - CVE-2024-41123: fix ReDoS in REXML source.match when no terminator string is specified - CVE-2024-41946: add XML entity expansion limit to REXML SAX and pull parsers - CVE-2024-43398: fix DoS via deep elements...

OpenClaw security vulnerabilities

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.2 contained security vulnerabilities. These vulnerabilities stemmed from insufficient scope in the Zalo webhook replay de-duplication key, allowing legitimate events from...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a logical error in the UDP wildcard binding conflict check when using hash2. This error may lead to...