8864 matches found
CLSA-2026-1792291430 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)
TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792291423 TuxCare security update for @babel/helper-create-regexp-features-plugin (2 CVEs)
TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792291422 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)
TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792291421 TuxCare security update for @babel/helper-create-regexp-features-plugin (1 CVE)
TuxCare rebuilt @babel/helper-create-regexp-features-plugin to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-116828
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leak when drm gem handle create fails virtio gpu gem create owns the reference taken by virtio gpu object create. On the drm gem handle create error path it calls drm gem object release instead of dropping...
PT-2026-116825
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: release the GEM object on virtio gpu vram create errors virtio gpu vram create frees the object with a bare kfreevram on both error paths after drm gem private object init has run, and on the second one after drm gem...
PT-2026-116830
In the Linux kernel, the following vulnerability has been resolved: bpf: Check params size before reading reserved fields bpf crypto ctx create is a kfunc whose second argument is declared with the sz annotation, so the verifier only guarantees that params sz bytes of params are valid. The functi...
PT-2026-116827
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leak in virtio gpu resource create ioctl virtio gpu resource create ioctl calls drm gem object release on the drm gem handle create error path instead of dropping the reference it owns, so obj-funcs-free...
PT-2026-116787
In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlan na create samples LL RESERVED SPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlan changelink can update needed headroom betwee...
CVE-2026-111895
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferredusername claim and whose AuthEntraId::create ignores the duplicate-login exception while continuing with the existing local...
CVE-2026-111887
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauthenticated attackers to confirm registered display names and emails via a distinct HTTP 409 response. Attackers can submit guest comments to the comment create endpoint with...
EUVD-2026-103324
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferredusername claim and whose AuthEntraId::create ignores the duplicate-login exception while continuing with the existing local...
CVE-2026-111895
The phpMyFAQ application (versions 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta ) contains an authentication bypass in the Microsoft Entra ID login flow. The root cause is located in the AuthEntraId::create() function, which improperly links users using the mutable preferred_username claim and ...
CVE-2026-111895 phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta Account Takeover via Entra ID preferred_username
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferredusername claim and whose AuthEntraId::create ignores the duplicate-login exception while continuing with the existing local...
EUVD-2026-103332
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauthenticated attackers to confirm registered display names and emails via a distinct HTTP 409 response. Attackers can submit guest comments to the comment create endpoint with...
CLSA-2026-1792195755 TuxCare security update for create-next-app (1 CVE)
TuxCare rebuilt create-next-app to address 1 CVE. Fixed in 16.0.6-tuxcare.4...
CLSA-2026-1792195750 TuxCare security update for create-next-app (9 CVEs)
TuxCare rebuilt create-next-app to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...
CLSA-2026-1792195745 TuxCare security update for create-next-app (2 CVEs)
TuxCare rebuilt create-next-app to address 2 CVEs. Fixed in 12.3.7-tuxcare.8...