Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...

UBUNTU-CVE-2026-56819

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, a remote unauthenticated peer can leak one direct ByteBuf per HTTP/2 DATA frame in applications that enable HTTP/2 content...

UBUNTU-CVE-2026-56817

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, any caller that can deliver bytes to a Netty channel pipeline containing XmlDecoder can send XML with a DOCTYPE declaration...

CVE-2026-61289

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite component: Quality Management Specs. The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2026-61053

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Diameter Gateway and SDK. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacke...

CVE-2026-61030

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-47036

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Siebel Approval Manager. Supported versions that are affected are 17.0-26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development...

UBUNTU-CVE-2026-47021

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...

UBUNTU-CVE-2026-47063

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...

GHSA-8Q5V-6PQQ-X66H vulnerabilities

Vulnerabilities for packages: powershell, dotnet, promitor, dotnet-sdk...

CVE-2026-47671

Nhost CLI prior to 1.46.0 exposes an unauthenticated, cross-origin-configurable configserver via nhost dev. The hidden configserver serves Mimir GraphQL with dummy authorization and permissive CORS (Access-Control-Allow-Origin: *). An attacker-controlled web page can reach localhost and perform q...

CVE-2026-47671 Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden nhost configserver used by nhost dev exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is running the local development environment...

CVE-2026-47671 Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden nhost configserver used by nhost dev exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is running the local development environment...

PT-2026-62197

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.3 Description An issue exists in the Siebel Approval Manager component of the Siebel CRM Development product. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromi...

.NET 8.0 security, bug fix, and enhancement update

8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192464...

PT-2026-62175

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, and 26.0.1 Oracle GraalVM for JDK versions 17.0.19 and 21.0.11 Oracle GraalVM Enterprise Edition version 21.3.18 Description An issue exists in the ImageIO component...

EUVD-2026-41559

webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libidn2: idn2-2.3.8-4.hum1 aarch64, x8664 libidn2-2.3.8-4.hum1 aarch64, x8664 libidn2-devel-2.3.8-4.hum1 aarch64, x8664 libidn2-2.3.8-4.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libyuv: libyuv-0-0.63.20260714gitafff0cf.1.hum1 aarch64, x8664 libyuv-devel-0-0.63.20260714gitafff0cf.1.hum1 aarch64, x8664 libyuv-0-0.63.20260714gitafff0cf.1.hum1.src src Security Fixes: libyuv:...

.NET 9.0 security, bug fix, and enhancement update

9.0.119-1.0.1 - Add support for Oracle Linux 9.0.119-1 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 9.0.118-2 - Reduce time to detect hanging builds - Resolves: RHEL-191646...