CVE-2026-58484 Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.listBackups reads each backup's manifest.json and trusts the manifest's path field. EnvironmentManager.pruneBackups later passes that trusted entry.path directly to rmSyncentry.path, recursive...

aiq-platform-api (>=1.0.17, <=1.0.57), archive-to-images (1.0.0) +24 more potentially affected by CVE-2026-44722 via pyzipper (>=0.3.5, <=0.3.6)

pyzipper PYPI version =0.3.5, =1.0.17, =0.1.5, =1.0.0, =0.0.1, =0.1.2, =1.3.5.5, =1.2.1, =0.0.1, =1.0.1, =0.0.11, =1.0.17 - jsw-jzyunqi 1.0.5 and more Source cves: CVE-2026-44722 Source advisory: MEND:CVE-2026-44722...

aiq-platform-api (>=1.0.17, <=1.0.57), archive-to-images (1.0.0) +24 more potentially affected by CVE-2026-44722 via pyzipper (>=0.3.5, <=0.3.6)

pyzipper PYPI version =0.3.5, =1.0.17, =0.1.5, =1.0.0, =0.0.1, =0.1.2, =1.3.5.5, =1.2.1, =0.0.1, =1.0.1, =0.0.11, =1.0.17 - jsw-jzyunqi 1.0.5 and more Source cves: CVE-2026-44722 Source advisory: OSV:PYSEC-2026-3044...

PT-2026-61658

Name of the Vulnerable Software and Affected Versions Network-AI versions prior to 5.12.2 Description An issue exists where EnvironmentManager.listBackups reads the manifest.json file of backups and trusts the path field. Subsequently, EnvironmentManager.pruneBackups passes this path value direct...

Product update: Virtuozzo PowerPanel RTM Hotfix 4 (7.0.1-422)

The new packages for Virtuozzo PowerPanel introduce a new feature as well as usability fixes. Vulnerability id: PP-336 Unable to select key combinations from the "Send Key Combination" list when using Mozilla Firefox. Vulnerability id: PP-506 Update could fail due to a package repository conflict...