PT-2026-75430

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 7.30.7-p2+tuxcare...

PT-2026-75583

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 8.12.2-p2+tuxcare...

PT-2026-74710

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.8.38-p2+tuxcare...

PT-2026-93231

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.4.36-p3+tuxcare...

CVE-2026-25292: Improper Validation of Syntactic Correctness of Input

Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration...

CVE-2026-14816: Improper Access Control

The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not properly verify authorization or the identity of the data subject when recording cookie-consent choices and privacy requests, allowing unauthenticated attackers to forge consent records for arbitrary email addresses and to flood...

Amazon Linux 2023 : python3-tornado (ALAS2023-2026-2016)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2016 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving...

Important: python3-tornado

Issue Overview: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, authusername, authpassword, and authmode in place when a redirect changed scheme...

PT-2026-74728

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 6.20.45-p1+tuxcare...

PT-2026-73657

TuxCare rebuilt laravel/framework to address 5 CVEs. Fixed in 5.8.38-p1+tuxcare...

PT-2026-74874

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 10.48.28-p1+tuxcare...

PT-2026-75241

TuxCare rebuilt laravel/framework to address 2 CVEs. Fixed in 11.51.0-p2+tuxcare...

PT-2026-67743

Name of the Vulnerable Software and Affected Versions Automotive Linux OS affected versions not specified Description Memory corruption occurs when the fastboot command handler for audio framework configuration processes untrusted user input due to improper validation of the input's syntactic...

CLEAR: Causal Context-Based Agentic Reasoning for Vulnerability Detection

Detecting source code vulnerabilities is increasingly difficult as modern security flaws are rooted in complex causal dependencies between execution flows, control conditions, and program states. Despite recent advances in Large Language Models LLMs and multi-agent frameworks, existing approaches...

PT-2026-74657

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.4.36-p4+tuxcare...

PT-2026-73898

TuxCare rebuilt laravel/framework to address 10 CVEs. Fixed in 5.4.36-p2+tuxcare...

PT-2026-75828

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 8.12.0-p4+tuxcare...

PT-2026-73597

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 11.44.0-p1+tuxcare...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-67976

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...