The Semantic Trap: Do Fine-Tuned LLMs Learn Vulnerability Root Cause or Just Functional Pattern?

LLMs demonstrate promising performance in software vulnerability detection after fine-tuning. However, it remains unclear whether these gains reflect a genuine understanding of vulnerability root causes or merely an exploitation of functional patterns. In this paper, we identify a critical failur...

Ubuntu: Security Advisory (USN-7979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:20139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

github.com/kyverno/kyverno is vulnerable to Denial Of Service DoS. The vulnerability is due to unbounded memory usage in the policy engine when processing crafted policies that exponentially amplify string data via context variables, which allows an attacker with policy creation privileges to...

CGA-HJMJ-FR7V-69CC

Bulletin has no description...

CGA-HC6G-7JQG-QMGG

Bulletin has no description...

CGA-V47F-PW54-83QV

Bulletin has no description...

CGA-V3GM-P764-6WQQ

Bulletin has no description...

CGA-QX9H-RC3G-Q43R

Bulletin has no description...

CGA-P87V-3759-5V2G

Bulletin has no description...

CGA-M534-XJ5F-7PP4

Bulletin has no description...

CGA-G425-P243-8QQH

Bulletin has no description...

CGA-5RQP-MM3X-75F2

Bulletin has no description...

CGA-24MF-M7H4-4MCV

Bulletin has no description...

CGA-5CJC-7RW6-42PV

Bulletin has no description...

CGA-3JPC-RX6W-QH23

Bulletin has no description...

CGA-4C6J-GWCJ-P3W7

Bulletin has no description...

CVE-2025-71008

A segmentation violation in the oneflow.oneflowinternal.autograd.Function.FunctionCtx.marknondifferentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-71008

CVE-2025-71008 describes a segmentation fault in OneFlow v0.9.0 within the internal autograd path (FunctionCtx.mark_non_differentiable). The issue can be triggered by crafted input to cause a Denial of Service. Affected component: oneflow._oneflow_internal.autograd.Function.FunctionCtx.mark_non_d...

CVE-2025-71008

A segmentation violation in the oneflow.oneflowinternal.autograd.Function.FunctionCtx.marknondifferentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...