CLSA-2026-1781744131 TuxCare security update for fast-xml-parser (2 CVEs)

TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 3.14.0-tuxcare.1...

CLSA-2026-1780879901 TuxCare security update for basic-ftp (2 CVEs)

TuxCare rebuilt basic-ftp to address 2 CVEs. Fixed in 5.0.5-tuxcare.1...

CLSA-2026-1779324473 TuxCare security update for postcss (4 CVEs)

TuxCare rebuilt postcss to address 4 CVEs. Fixed in 7.0.32-tuxcare.1...

CLSA-2026-1778805973 TuxCare security update for picomatch (2 CVEs)

TuxCare rebuilt picomatch to address 2 CVEs. Fixed in 2.3.1-tuxcare.1...

CLSA-2026-1777336758 TuxCare security update for timespan (1 CVE)

TuxCare rebuilt timespan to address 1 CVE. Fixed in 2.3.0-tuxcare.1...

CLSA-2026-1776904637 TuxCare security update for netmask (2 CVEs)

TuxCare rebuilt netmask to address 2 CVEs. Fixed in 1.0.6-tuxcare.1...

CLSA-2026-1775175794 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 18 @angular packages to address 2 CVEs. Fixed in 7.2.16-tuxcare.4...

CLSA-2026-1774484512 TuxCare security update for deep-extend (1 CVE)

TuxCare rebuilt deep-extend to address 1 CVE. Fixed in 0.4.2-tuxcare.1...

CLSA-2026-1773360977 TuxCare security update for bootstrap (3 CVEs)

TuxCare rebuilt bootstrap to address 3 CVEs. Fixed in 3.4.1-tuxcare.1...

CLSA-2026-1773015253 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 4 com.google.guava packages to address 2 CVEs. Fixed in 27.1-android-tuxcare.1...

Joern 4.0.595

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Important: python-pyasn1

Issue Overview: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily larg...

Important: dotnet10.0

Issue Overview: Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access SMA 1000 series VPN appliances. In a report published over the weekend, Resecurity said it observed the INC Ransomware accelerating its activi...

CVE-2026-66402

A flaw was found in FreeRDP. This flaw involves multiple weaknesses in how FreeRDP validates TLS Transport Layer Security certificates. FreeRDP's custom validation logic can incorrectly process DNS Subject Alternative Name SAN values, accept Common Names without proper comparison to other SAN...

Azure Active Directory Deserialization DoS

The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2026-67328

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflect...

Security Bulletin: IBM Storage Protect for Space Management is affected by multiple vulnerabilities in IBM SDK, Java Technology Edition (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007)

Summary IBM Storage Protect for Space Management includes IBM SDK, Java Technology Edition to support Java-based components. Multiple vulnerabilities in IBM SDK, Java Technology Edition could allow an attacker to obtain unauthorized access to sensitive information or cause a partial denial of...

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions were released last month. In its latest patch for Chrome 151, released Wednesday,...

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service DoS attacks and even session hijacking, allowing an attacker to seize control of a user's network session. The findin...