Malicious Package

Overview leadconduit-generic is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2026-94688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the pinctrl generic subsystem when the pinctrl generic to map function fails. The function parses Device Tree DT configuration and allocates pinctrl maps using...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

CVE-2026-7514

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...

EUVD-2026-80120

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...

CVE-2026-7514 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...

CVE-2026-7514 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...

CVE-2026-7514

CVE-2026-7514 is a missing authorization vulnerability in the Generic Package Registry of GitLab CE/EE , affecting versions 13.9 through before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 . An authenticated user with developer-role permissions could substitute package file content and hide...

CVE-2026-7514 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...

CVE-2026-92216 a2ui-project a2ui Binder generic-binder.ts openUrl redirect

A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/webcore/src/v09/rendering/generic-binder.ts of the component Binder. The manipulation results in open redirect. It is possible to launch the attack remotely. The proje...

CVE-2026-92216 a2ui-project a2ui Binder generic-binder.ts openUrl redirect

A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/webcore/src/v09/rendering/generic-binder.ts of the component Binder. The manipulation results in open redirect. It is possible to launch the attack remotely. The proje...

CVE-2026-92216

a2ui-project a2ui versions up to 0.10.7 are affected by an open redirect vulnerability in the openUrl function of the Binder component (file: renderers/web_core/src/v0_9/rendering/generic-binder.ts). An attacker can launch the attack remotely by manipulating the openUrl function to redirect to an...

CVE-2026-7514: Missing Authorization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...

PT-2026-93327

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 13.9 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1 Description An authenticated user with developer-role permissions can substitute package file content and hide packag...

GitLab 13.9 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-7514)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions cou...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-databind-2.16.0.jar

Summary IBM Watson Discovery Cartridge affected by vulnerability in jackson-databind-2.16.0.jar Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8,...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in jackson-databind

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in jackson-databind Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18....

CVE-2026-58701

A race condition in trusty_dputc of generic-arm64-smcall.c allows for a possible out-of-bounds write . This vulnerability could lead to a local escalation of privilege , requiring System execution privileges . No user interaction is required for exploitation. The issue affects the Trusty componen...

EUVD-2026-79003

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58701: Concurrent Execution using Shared Resource with Improper Synchronization

In trustydputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...