133765 matches found
PT-2026-73034
@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...
PT-2026-72678
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtw aes decrypt The null-pointer-guard was incorrect, returning FAIL on valid pointer. Invert the guard, so it returns FAIL on invalid pointer...
PT-2026-73032
@fastify/oauth2 is an OAuth 2.0 plugin for Fastify. In versions from 7.2.0 up to but not including 8.3.0, the plugin validates the OAuth state, and with PKCE the code verifier, by comparing the callback query parameter against an unprefixed, predictable cookie, with no server-side binding to the...
PT-2026-72770
In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Fix locking when accessing mr-pd Sashiko points out that, due to rereg mr, the PD is actually variable and all the touches in nldev are racy. Use mr-device instead of mr-pd-device. Getting the PD restrack ID is more...
PT-2026-76448
These are all security issues fixed in the obs-service-cargo-7.2.2-2.1 package on the GA media of openSUSE Tumbleweed...
CLSA-2026-1786748284 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 15.2.10-tuxcare.12...
CLSA-2026-1786737301 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 19 @angular packages to address 2 CVEs. Fixed in 6.1.10-tuxcare.11...
CLSA-2026-1786735405 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 18 @angular packages to address 2 CVEs. Fixed in 5.2.7-tuxcare.5...
CVE-2026-73849
In CVE-2026-73849, Emlog (2.6.26 and earlier) allows unauthenticated reinstall via install.php?action=reinstall. The code path bypasses the already-installed guard when act != 'reinstall', letting a remote attacker submit hostname, dbuser, dbpasswd, dbname, dbprefix, username, password, and email...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.3-0.1.hum1 aarch64, x8664 tempo3.0-3.0.3-0.1.hum1.src src...
CVE-2026-72832
Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...
CVE-2026-72834
filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum ?checksum= branch of resourceGetHandler reads the entire file to compute a digest and returns it without performing a Perm.Download check unlike the sibling raw, preview, and subtitle paths. As a...
CVE-2026-72832 Grav before 2.0.12 Stored XSS via quoted-attribute bypass
Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...
ROOT-APP-MAVEN-CVE-2023-20860 CVE-2023-20860 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2023-20860 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
RHSA-2026:54590 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54574 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54550 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54541 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...