MiracleLinux 9 : thunderbird-140.16.0-1.el9_8.ML.1 (AXSA:2026-1948:22)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1948:22 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings...

JetBrains TeamCity < 2025.11.8 / 2026.1.x < 2026.1.4 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.8, or 2026.1.x prior to 2026.1.4. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the...

Linux Distros Unpatched Vulnerability : CVE-2026-103431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it,...

PaperCut MF < 25.0.12 / 26.x < 26.0.2 RCE (CVE-2026-14780)

The version of PaperCut MF installed on the remote Windows host is prior to 25.0.12, or 26.x prior to 26.0.2. It is, therefore, affected by a vulnerability: - A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:21980-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21980-1 advisory. Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: - CVE-2026-96869: Information disclosure in the Networking...

GO-2026-6591 ZITADEL: Actions V1 sandbox escape: host file read via require() in github.com/zitadel/zitadel

ZITADEL: Actions V1 sandbox escape: host file read via require in github.com/zitadel/zitadel...

RLSA-2026:73971 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component CVE-2026-75874 firefox: Sandbox escape due to...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

PYSEC-2026-4105 Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

Summary The /csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters. A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in a...

Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint

SummaryThe /csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters.A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in an...

PYSEC-2026-4161 RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution

Impact RestrictedPython could allow a sandbox escape when a policy exposes the standard library string module, or otherwise exposes string.Formatter, to restricted code. string.Formatter field resolution methods such as getfield can perform attribute and item traversal internally and return live...

RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution

ImpactRestrictedPython could allow a sandbox escape when a policy exposes the standard library string module, or otherwise exposes string.Formatter, to restricted code.string.Formatter field resolution methods such as getfield can perform attribute and item traversal internally and return live...

GHSA-JF8Q-945G-9Q4C vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks

Summary vm2 current head v3.11.5, commit 7a1f5100b96f48d34e0fe104ab37c0acc5944f92 still exposes registered Node.js internal symbols from host WebStream prototypes to sandbox code. The prior nodejs. symbol hardening blocks Symbol.for'nodejs.' at the source, but the extraction filters and bridge...

NPM: vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

NPM: vm2: NodeVM builtin allowlist bypass via node:test.run execArgv allows sandbox escape vulnerability discovered by ? in WordPress Npm vm2 versions = 3.9.6, = 3.11.6...

EUVD-2026-81597

vm2: NodeVM builtin allowlist bypass via node:test.run execArgv allows sandbox escape...

vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

Summary On Node.js 24 and newer, vm2 can expose the host node:test module to sandboxed NodeVM code when the embedder explicitly allows the node:test builtin. Sandbox code can reach that module through require'node:node:test' and call run with attacker-controlled execArgv. node:test.run starts a...

GHSA-QHWX-74W5-XHXQ vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

Summary On Node.js 24 and newer, vm2 can expose the host node:test module to sandboxed NodeVM code when the embedder explicitly allows the node:test builtin. Sandbox code can reach that module through require'node:node:test' and call run with attacker-controlled execArgv. node:test.run starts a...

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

Summary The vm2 command-line tool installed by npm install -g vm2 and documented in the README's "CLI" section runs the supplied script under NodeVM with require:external:true and no root / context / builtin configured. With these defaults the resolver loads every relative or absolute require...

EUVD-2026-81599

vm2 CLI provides no sandbox isolation - host-realm require is reachable from sandboxed scripts...

GHSA-JXXV-8R27-VM4P vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

Summary The vm2 command-line tool installed by npm install -g vm2 and documented in the README's "CLI" section runs the supplied script under NodeVM with require:external:true and no root / context / builtin configured. With these defaults the resolver loads every relative or absolute require...