PT-2026-65352

Providing a specially crafted dictionary to s2.NewDict and using it to encode data can make the encoder read out of bounds...

PT-2026-65360

Gitea: Private Repository Metadata Remains Accessible After Access Revocation in gitea.dev...

PT-2026-65351

Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama...

PT-2026-65349

Buildah allows a build-time breakout when using a malicious Containerfile or a malicious Git HTTP server. A crafted Git URL or Containerfile can cause Buildah to access files outside of the build context during an ADD or COPY operation...

PT-2026-65359

Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc...

PT-2026-65366

Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR 38145 in gitea.dev...

UBUNTU-CVE-2026-58264

heap-based buffer overrun in command handler...

PT-2026-65357

Gitea: Public-only API token restriction is not enforced on team API routes in gitea.dev...

PT-2026-65362

Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev...

PT-2026-65378

Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private in code.gitea.io/gitea...

PT-2026-65356

Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass in gitea.dev...

PT-2026-65374

Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea...

Xalgorix Autonomous AI Pentesting Agent 4.5.87

Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...

PT-2026-64858

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT FAILED before nvmet req uninit in digest error path In nvmet tcp try recv ddgst, when a data digest mismatch is detected, nvmet req uninit is called unconditionally. However, if the command arrived via the...

PT-2026-65346

The Avro array and map decoders loop over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count as a Go int, which is 64-bit on amd64 and arm64 targets. A producer can declare a block of up to...

PT-2026-65383

Gitea: Public-only repository tokens can update private PR head branches in gitea.dev...

PT-2026-65354

Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy...

PT-2026-65364

Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint in gitea.dev...

PT-2026-65347

Several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-int arithmetic. On 32-bit targets, the truncation paths can silently bypass byte-slice limits,...

Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator an...