CLSA-2026-1789472298 TuxCare security update for @ai-sdk/provider-utils (1 CVE)

TuxCare rebuilt @ai-sdk/provider-utils to address 1 CVE. Fixed in 3.0.27-tuxcare.1...

CLSA-2026-1789467187 TuxCare security update for 3 packages (1 CVE)

TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 9.20.3-tuxcare.1...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.38 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.38 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.33 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.33 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CLSA-2026-1789465861 TuxCare security update for valibot (2 CVEs)

TuxCare rebuilt valibot to address 2 CVEs. Fixed in 0.41.0-tuxcare.1...

CLSA-2026-1789465375 TuxCare security update for launch-editor (2 CVEs)

TuxCare rebuilt launch-editor to address 2 CVEs. Fixed in 2.2.1-tuxcare.1...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.14 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

CLSA-2026-1789461261 TuxCare security update for 23 packages (1 CVE)

TuxCare rebuilt 23 packages to address 1 CVE. Fixed in 16.0.6-tuxcare.9...

CLSA-2026-1789457514 TuxCare security update for io.undertow (1 CVE)

TuxCare rebuilt 9 io.undertow packages to address 1 CVE. Fixed in 2.0.26.Final-tuxcare.1...

CLSA-2026-1789456962 TuxCare security update for pydantic (1 CVE)

TuxCare rebuilt pydantic to address 1 CVE. Fixed in 1.10.0.post1+tuxcare...

CLSA-2026-1789456930 TuxCare security update for laminas/laminas-diactoros (2 CVEs)

TuxCare rebuilt laminas/laminas-diactoros to address 2 CVEs. Fixed in 1.8.7p2-1+tuxcare...

CLSA-2026-1789456491 TuxCare security update for io.undertow (1 CVE)

TuxCare rebuilt 8 io.undertow packages to address 1 CVE. Fixed in 2.3.17.Final-tuxcare.2...

CLSA-2026-1789456194 TuxCare security update for idna (1 CVE)

TuxCare rebuilt idna to address 1 CVE. Fixed in 3.6.post2+tuxcare...

CLSA-2026-1789455724 TuxCare security update for org.springframework.hateoas:spring-hateoas (2 CVEs)

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 2 CVEs. Fixed in 2.2.5-tuxcare.1...

CLSA-2026-1789454358 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.4.post7+tuxcare...

CLSA-2026-1789453540 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.9.post6+tuxcare...

ROOT-OS-DEBIAN-12-CVE-2025-28162 CVE-2025-28162 in libpng1.6 - Patched by Root

Root has patched CVE-2025-28162 in the libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-17495

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...

CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...

CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...