excel-mcp-server 路径遍历漏洞

excel-mcp-server is an Excel file operation server developed by Haris, a personal developer. It supports the creation, reading, and modification of workbooks. Versions of excel-mcp-server prior to 0.1.7 have a path traversal vulnerability. This vulnerability stems from the getexcelpath function n...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011267 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: clear extent cache after moving/defragmenting extents The extent map cache can become stal...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010872 advisory. In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that SIFMT bits of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013051)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013051 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfsmdtgetblock If the disk image that nilfs2 mounts is corrupted a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010951 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifscopyfilerange If the file is used by swap, before return -EOPNOTSUPP,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010882 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate data run offset This adds sanity checks for data run offset. We should make su...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010878)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010878 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4orphancleanup I caught a issue as follows:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010875 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequests are joined back into the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013179 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sbgetblkinode-isb, parent return a null ptr and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013084 advisory. In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Check for read-only mounted filesystem in txBegin This patch adds a check for read-only...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010717 advisory. A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attrpunchhole was found. A local user could use this flaw to crash the system. Tenable has...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013314 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix invalid free of JFSIPipimap-iimap in diUnmount syzbot found an invalid-free in diUnmount...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010974 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013008 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifsconstructtcon When having a multiuser mount with domain=...

Linux Distros Unpatched Vulnerability : CVE-2026-40706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfsbuildpermissionsposix in acls.c that allows an attacker to corrupt heap memory in th...

EUVD-2026-24467

In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfsbuildpermissionsposix in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the READ path stat, readdir, open when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012999)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012999 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013320 advisory. In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fix null-ptr-deref Read in txBegin Syzkaller reported an issue where txBegin may be call...

CVE-2026-41296

CVE-2026-41296 affects OpenClaw prior to 2026.3.31. A time-of-check-time-of-use race in the remote filesystem bridge readFile function allows sandbox escape by exploiting separate path validation and file read operations to bypass sandbox restrictions and read arbitrary files. The vulnerability i...

OPENSUSE-SU-2026:20571-1 Security update for go1.26

This update for go1.26 fixes the following issues: - Update to version go1.26.2 bsc1255111. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...