ALSA-2026:52761 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 For more details about the security issues, including the impact, a CVSS scor...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer ...

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 For more details about the security issues, including the impact, a CVSS scor...

Linux Distros Unpatched Vulnerability : CVE-2026-68353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: fix OOB read from firmware nummsg in TX complete handler The firmware-controlled nummsg field u8, 0-255 drives the loop in...

CVE-2021-31532

creationtimestamp| type| source ---|---|--- 2026-08-09 05:02:33+00:00| seen| Telegram/xS3Z9NpCoU2LJfvDLCd1Olb4PnPVbToMQS6j0RMReaGsm0 2026-08-10 00:00:10+00:00| seen| Telegram/xS3Z9NpCoU2LJfvDLCd1Olb4PnPVbToMQS6j0RMReaGsm0...

CVE-2026-17510

creationtimestamp| type| source ---|---|--- 2026-08-09 02:31:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2za2ogj6oc6pd 2026-08-12 20:02:27+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3msvwck3zmw2r...

GHSA-F88M-G3JW-G9CJ

creationtimestamp| type| source ---|---|--- 2026-08-08 04:17:23+00:00| seen| https://gist.github.com/farrelalvis/1030dc3a5520ef382113c429daf63288 2026-09-06 11:40:11+00:00| seen| https://bsky.app/profile/kakkokari-gtyih.misskey.io.ap.brid.gy/post/3mutvv2wexkm2...

GHSA-FP3F-MC75-235C

creationtimestamp| type| source ---|---|--- 2026-08-07 20:34:02+00:00| seen| https://gist.github.com/alon710/51a19d7e4b20307e86a86a2096f8e2e7...

JLSEC-2026-1219 Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a...

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

GHSA-MMJ4-63M4-R6H5

creationtimestamp| type| source ---|---|--- 2026-08-07 18:58:46+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3msjag2qwrq25...

CVE-2026-54316

creationtimestamp| type| source ---|---|--- 2026-08-07 17:53:37+00:00| seen| https://bsky.app/profile/securityrss.bsky.social/post/3msj4bxfzpp23 2026-08-08 12:00:31+00:00| seen| https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585 2026-08-29 21:41:21+00:00| seen|...

CVE-2026-56818

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...

DoS (Denial of Service) io.netty:netty-codec Dependency in Bamboo Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CVE-2026-28145

creationtimestamp| type| source ---|---|--- 2026-08-07 16:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msixbjsnbw2i...

Cross-site Scripting (XSS)

Overview dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the INPLACE sanitization process when a hook removes an element, leaving its detached descendants with executable event handlers. An attacker ca...

perf/core: Detach event groups during remove_on_exec

...

GHSA-8HCV-X26H-MCGP

creationtimestamp| type| source ---|---|--- 2026-08-07 06:34:35+00:00| seen| https://gist.github.com/alon710/455dd27ab1381c77c49e252fb102cb9f...

CVE-2026-14205

The WP Events Manager WordPress plugin (versions before 2.2.5 ) is vulnerable to a payment bypass due to improper validation of the requested quantity when registering for paid events. An authenticated user can manipulate the attacker-controlled quantity parameter to cause the system to compute a...

pocyeah

An open-source project from Pillar Security PocYeah Turn...

EUVD-2026-54202

The Event Booking Manager for WooCommerce Pro WordPress plugin before 5.0.3 does not validate the ticket price on the server during its native non-WooCommerce checkout, trusting the per-ticket price supplied by the client instead of re-deriving the event's configured price. This allows...