923 matches found
CVE-2026-66709
Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...
EUVD-2026-53912
Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...
CLSA-2026-1776299668 TuxCare security update for io.netty (9 CVEs)
TuxCare rebuilt 42 io.netty packages to address 9 CVEs. Fixed in 4.1.58.Final-tuxcare.1...
EUVD-2026-52569
A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...
Relay authentication challenges can exhaust memory
The SDK forwarded every NIP-42 AUTH challenge received from a relay through an unbounded command queue. Challenge handling can wait for an asynchronous signer or user interaction, so receiving challenges was substantially faster than completing the corresponding authentication work. A malicious...
RUSTSEC-2026-0231 Relay authentication challenges can exhaust memory
The SDK forwarded every NIP-42 AUTH challenge received from a relay through an unbounded command queue. Challenge handling can wait for an asynchronous signer or user interaction, so receiving challenges was substantially faster than completing the corresponding authentication work. A malicious...
CLEANSTART-2026-JV61743 Security fixes in pulumi-kubernetes-operator 2.7.0-r0
Package pulumi-kubernetes-operator version 2.7.0-r0 fixes 42 vulnerabilities: CVE-2024-7598, CVE-2025-1767, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136...
CLEANSTART-2026-IW13101 Security fixes in cassandra-reaper-fips 3.7.1-r4
Package cassandra-reaper-fips version 3.7.1-r4 fixes 42 vulnerabilities: CVE-2022-1471, CVE-2022-38752, CVE-2022-41854, CVE-2025-52999, ghsa-72hv-8253-57qq...
CVE-2026-55081
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the scope query parameter into the generated HTML document without sufficient sanitization. A crafted scope value could be rendered a...
CVE-2026-12206
A vulnerability was identified in Grit42 Grit up to 0.11.0. This issue affects the function Grit::Assays::DataTableEntity of the file modules/assays/backend/app/models/grit/assays/datatableentity.rb. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The...
[SECURITY] Fedora 42 Update: rust-sequoia-sop-0.37.3-3.fc42
An implementation of the Stateless OpenPGP Interface using Sequoia...
[SECURITY] Fedora 42 Update: rust-sequoia-sqv-1.3.0-6.fc42
A simple OpenPGP signature verification program...
[SECURITY] Fedora 42 Update: rust-sequoia-sq-1.3.1-11.fc42
Command-line frontends for Sequoia...
[SECURITY] Fedora 42 Update: rust-sequoia-git-0.6.0-2.fc42
A tool for managing and enforcing a commit signing policy...
[SECURITY] Fedora 42 Update: rust-rpm-sequoia-1.10.2-2.fc42
An implementation of the RPM PGP interface using Sequoia...
[SECURITY] Fedora 42 Update: rust-sequoia-octopus-librnp-1.11.1-6.fc42
Reimplementation of RNP's interface using Sequoia for use with Thunderbird...
Fedora 42 : perl-Crypt-DSA (2026-ffe3625a50)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ffe3625a50 advisory. This update fixes a couple of security issues: Replace two arg open CVE-2026-8704 Replace rand with a cryptographically-secure source of random data...
Fedora 42 : rrdtool (2026-93281f2f96)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-93281f2f96 advisory. This is an update backporting some safety checks from the rrdtool-1.10.0. Tenable has extracted the preceding description block directly from the Fedora...
Fedora 42 : poppler (2026-2bdb132e40)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2bdb132e40 advisory. This update fixes CVE-2025-52885 and CVE-2025-43718 Tenable has extracted the preceding description block directly from the Fedora security advisory...