List of Security Fixes and Improvements in Veeam Backup for Salesforce

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Backup for Salesforce. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...

List of Security Fixes and Improvements in Veeam Plug-in for Microsoft Azure

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Microsoft Azure. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases...

openSUSE 16 Security Update : supergfxctl (openSUSE-SU-2026:21794-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21794-1 advisory. Changes in supergfxctl: - Fixed security issue in embedded dependency 'bytes' CVE-2026-25541 boo1274336 - Update to version 1762634235.5d503b1: Added...

Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...

Malicious code in toru-ultimate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef8cb6f3ca866b67fa91f2e770c674ddb7d6b110fd671ba98669dc1220510f The package's loginViaAPI function POSTs caller-supplied Facebook email, password, and 2FA Base32 secret to...

MAL-2026-16057 Malicious code in toru-ultimate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef8cb6f3ca866b67fa91f2e770c674ddb7d6b110fd671ba98669dc1220510f The package's loginViaAPI function POSTs caller-supplied Facebook email, password, and 2FA Base32 secret to...

CVE-2026-87056

A flaw was found in operator-sdk-builder. The repository lacks automated dependency-update configurations for its git submodules, Containerfile base image, and Tekton bundle references. This absence prevents the automatic flagging of stale or vulnerable dependencies. Consequently, this could lead...

CVE-2026-87052

A flaw was found in operator-foundry. The absence of automated dependency-update and vulnerability-scanning configurations in the repository increases the risk of undetected security vulnerabilities. This lack of automated security checks could potentially lead to the inclusion of known vulnerabl...

CVE-2024-58377

Rejected CVE Nokogiri before 1.16.5, when using bundled libxml2, is affected by the libxml2 flaw CVE-2024-34459...

@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.3) +187 more potentially affected by CVE-2026-92598 via nodemailer (>=9.0.0, <=9.0.6)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2026-92598 Source advisory: OSV:GHSA-WMMP-3585-3RMP...

@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.3) +187 more potentially affected by CVE-2026-92598 via nodemailer (>=9.0.0, <=9.0.6)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2026-92598 Source advisory: SNYK:JS-NODEMAILER-19652370...

@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.3) +187 more potentially affected by CVE-2025-14874 +1 more via nodemailer (>=9.0.0, <=9.0.6)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2025-14874, CVE-2026-92596 Source advisory: OSV:GHSA-2X7J-588G-CCC2...

@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.3) +187 more potentially affected by CVE-2026-92596 via nodemailer (>=9.0.0, <=9.0.6)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2026-92596 Source advisory: SNYK:JS-NODEMAILER-19651822...

02112019lab6 (1.0.0), 03-custom-tian (>=1.0.1, <=1.0.6) +9334 more potentially affected by CVE-2026-92597 via nodemailer (>=6.9.16, <=9.0.6)

nodemailer NPM version =6.9.16, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac 1.0.8 - 123acyashu 1.0.8 - 123acyashuac 1.0.8 and more Source cves: CVE-2026-92597 Source advisory: SNYK:JS-NODEMAILER-19651818...

02112019lab6 (1.0.0), 03-custom-tian (>=1.0.1, <=1.0.6) +9334 more potentially affected by CVE-2026-92597 via nodemailer (>=6.9.16, <=9.0.6)

nodemailer NPM version =6.9.16, =1.0.1, =1.0.0, =1.0.0, =0.2.9, =0.2.19 - 123ac 1.0.8 - 123acyashu 1.0.8 - 123acyashuac 1.0.8 and more Source cves: CVE-2026-92597 Source advisory: OSV:GHSA-CC9R-2J5M-2M83...

@fox-hound-tools/protobuf-grpc-json-transcoding (>=0.70.0, <=0.71.0), @octocloud/typespec (>=0.1.16, <=0.1.37) potentially affected by unknown CVE via @typespec/openapi3 (>=1.0.0, <=1.7.0)

@typespec/openapi3 NPM version =1.0.0, =0.70.0, =0.1.16, =0.1.37 Source cves: unknown CVE Source advisory: OSV:GHSA-2Q42-4Q24-7RGV...

@aliceo2/bookkeeping (>=1.19.0, <=1.20.0), @beyondnet/evolith-cli (>=1.2.0, <=1.3.2) +62 more potentially affected by CVE-2026-77037 via multer (2.2.0)

multer NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on multer and may be impacted: - @aliceo2/bookkeeping =1.19.0, =1.2.0, =1.2.0, =2026.7.0, =5.7.5, =11.1.29-depup.0, =0.1.0, =0.1.0, =11.0.62, =1.2.34, =12.0.0, =3.0.0, =3.0.0, =3.0.0...

@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +11 more potentially affected by CVE-2026-86076 via n8n (>=0.81.0, <=0.219.1)

n8n NPM version =0.81.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2026-86076 Source advisory: MEND:CVE-2026-86076...

20231122-npm (1.0.0), 2048.io (0.0.1) +6526 more potentially affected by CVE-2026-15603 via morgan (>=1.0.0, <=1.11.0)

morgan NPM version =1.0.0, =1.0.2, =1.0.0, =0.2.0, =0.0.1, =1.0.0, =0.2.0, =0.0.1, =0.0.1-bate.30, =0.0.1, =0.0.67 and more Source cves: CVE-2026-15603 Source advisory: OSV:GHSA-JXFW-X594-9X9M...

@apisurf/canonui (>=0.1.1, <=0.2.1), @apisurf/deckui (>=0.1.1, <=0.1.2) +16 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =1.0.1, =1.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-19652369...