CLSA-2026-1770768565 TuxCare security update for org.eclipse.parsson (2 CVEs)

TuxCare rebuilt 6 org.eclipse.parsson packages to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2025-1767053309 TuxCare security update for ch.qos.logback (3 CVEs)

TuxCare rebuilt 4 ch.qos.logback packages to address 3 CVEs. Fixed in 1.4.14-tuxcare.1...

CLSA-2025-1764547659 TuxCare security update for 38 packages (2 CVEs)

TuxCare rebuilt 38 packages to address 2 CVEs. Fixed in 9.0.83-tuxcare.2...

CLSA-2025-1763597219 TuxCare security update for com.squareup.okio (1 CVE)

TuxCare rebuilt 4 com.squareup.okio packages to address 1 CVE. Fixed in 2.10.0-tuxcare.1...

CLSA-2025-1765930087 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.29-tuxcare.3...

CLSA-2025-1762992413 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.31-tuxcare.2...

CLSA-2025-1763424415 TuxCare security update for io.projectreactor.netty (1 CVE)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 1 CVE. Fixed in 1.0.39-tuxcare.1...

CLSA-2025-1766534902 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.27-tuxcare.2...

CLSA-2025-1765411678 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.29-tuxcare.2...

CLSA-2025-1762906009 TuxCare security update for ch.qos.logback (4 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 4 CVEs. Fixed in 1.1.7-tuxcare.1...

CLSA-2025-1761523598 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.9...

CLSA-2025-1759795579 TuxCare security update for 38 packages (18 CVEs)

TuxCare rebuilt 38 packages to address 18 CVEs. Fixed in 9.0.83-tuxcare.1...

CLSA-2025-1751328209 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1...

CLSA-2024-1727308813 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.31.tuxcare...

EUVD-2026-52689

Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit...

MAL-2026-11719 Malicious code in @or-sdk/permissions-lambda (npm)

npm/@or-sdk/permissions-lambda is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @onereach/si-merge-tag-input (npm)

npm/@onereach/si-merge-tag-input is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

RHSA-2026:47057 Red Hat Security Advisory: nodejs:24 security update

Bulletin has no description...

K000162755: Node.js CVE-2026-48937

Security Advisory Description A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24. CVE-2026-48937 Impact There is no impact; F5 products are not affected b...

CVE-2026-14939

The Visualizer WordPress plugin is affected: versions before 4.0.6 expose a vulnerability where an attacker with Contributor-level access can supply a URL that is not validated to safe address ranges, enabling server-side requests (SSRF) to link-local instance-metadata endpoints. The fetched resp...