CLSA-2026-1774916750 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.37-tuxcare.1...

CLSA-2026-1774743832 TuxCare security update for handlebars (3 CVEs)

TuxCare rebuilt handlebars to address 3 CVEs. Fixed in 2.0.0-tuxcare.2...

CLSA-2026-1774657354 TuxCare security update for karma (3 CVEs)

TuxCare rebuilt karma to address 3 CVEs. Fixed in 4.1.0-tuxcare.1...

CLSA-2026-1774225193 TuxCare security update for yargs-parser (1 CVE)

TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 11.1.1-tuxcare.1...

CLSA-2026-1773879458 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.60.tuxcare0001...

CLSA-2026-1773793044 TuxCare security update for body-parser (2 CVEs)

TuxCare rebuilt body-parser to address 2 CVEs. Fixed in 1.8.4-tuxcare.1...

CLSA-2026-1773360975 TuxCare security update for ms (17 CVEs)

TuxCare rebuilt ms to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1773188138 TuxCare security update for websocket-extensions (1 CVE)

TuxCare rebuilt websocket-extensions to address 1 CVE. Fixed in 0.1.1-tuxcare.3...

CLSA-2026-1773188121 TuxCare security update for jquery (16 CVEs)

TuxCare rebuilt jquery to address 16 CVEs. Fixed in 1.8.2-tuxcare.1...

CLSA-2026-1773101704 TuxCare security update for jquery-validation (5 CVEs)

TuxCare rebuilt jquery-validation to address 5 CVEs. Fixed in 1.19.0-tuxcare.1...

CLSA-2026-1772669617 TuxCare security update for concat-stream (3 CVEs)

TuxCare rebuilt concat-stream to address 3 CVEs. Fixed in 1.5.0-tuxcare.1...

CLSA-2026-1771891821 TuxCare security update for utils-extend (2 CVEs)

TuxCare rebuilt utils-extend to address 2 CVEs. Fixed in 1.0.8-tuxcare.1...

CLSA-2026-1770682160 TuxCare security update for marked (1 CVE)

TuxCare rebuilt marked to address 1 CVE. Fixed in 4.0.8-tuxcare.1...

CLSA-2026-1770163741 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.59.tuxcare00001...

CLSA-2025-1761696401 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1...

CLSA-2025-1756253007 TuxCare security update for 38 packages (18 CVEs)

TuxCare rebuilt 38 packages to address 18 CVEs. Fixed in 9.0.75-tuxcare.1...

CVE-2026-18809 Information disclosure in Firefox for Android and Firefox Focus for Android

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3...

CVE-2026-18809 Information disclosure in Firefox for Android and Firefox Focus for Android

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3...

PYSEC-2026-3606 Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive

Summary Penelope versions prior to 0.19.3 extracted tar archives received from remote sessions without validating archive member paths. When using the affected Unix download path, a malicious or compromised remote session could return a crafted tar archive containing path traversal entries, such ...

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Overview On August 2, 2026, N-able published a security advisory for CVE-2026-18577, an authentication bypass vulnerability affecting N-central that was discovered being exploited in-the-wild after an incomplete fix for an earlier authentication bypass issue, CVE-2026-18556 was disclosed...