CVE-2026-68148 fscrypt: Add missing superblock check in find_or_insert_direct_key()

In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in findorinsertdirectkey The legacy 'fscryptdirectkeys' table caches master keys that are used by v1 encryption policies that have FSCRYPTPOLICYFLAGDIRECTKEY. It's just a global table for all...

CVE-2026-68148

The CVE relates to the Linux kernel fscrypt component. A missing superblock check in fscrypt_find_or_insert_direct_key() allowed inode keys to be shared across different super_blocks, risking use-after-free of a fscrypt_direct_key and potentially enabling denial of service, information disclosure...

Prototype Pollution

Axios is vulnerable to Prototype Pollution. The vulnerability is due to use of the in operator in the mergeDirectKeys strategy for validateStatus, which traverses the prototype chain, allowing a polluted Object.prototype.validateStatus to override behavior and treat all HTTP responses as...

Prototype Pollution

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Prototype Pollution via the mergeDirectKeys function in mergeConfig. An attacker can force a request configuration to inherit attacker-controlled properti...