MINI-QF76-5M4V-VMWV

Bulletin has no description...

MINI-JCCJ-3945-2HR5

Bulletin has no description...

MINI-2RH9-66M7-XR7H

Bulletin has no description...

MINI-MMGH-WC4Q-966X

Bulletin has no description...

MINI-6XRX-GVPG-PQ6C

Bulletin has no description...

MINI-PGQ6-Q3J2-8R34

Bulletin has no description...

MINI-VRV8-X5QR-V382

Bulletin has no description...

MINI-33CW-3963-MWVP

Bulletin has no description...

MINI-V66C-GQMM-MM5X

Bulletin has no description...

MINI-JJMM-FP93-P6FV

Bulletin has no description...

MINI-VGMX-GGV6-F5F3

Bulletin has no description...

MINI-855M-F3R9-P89H

Bulletin has no description...

MINI-XCMW-3XVP-4X2Q

Bulletin has no description...

Incomplete Comparison with Missing Factors

Overview Affected versions of this package are vulnerable to Incomplete Comparison with Missing Factors in the hasvaryheader function. An attacker can gain access to cached responses intended for other users by sending requests with whitespace-padded Vary header values. Remediation Upgrade django...

GHSA-923M-GV2P-W5QP Django: has_vary_header may expose cached responses when Vary values contain whitespace

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespace from Vary response header values before comparison, which allows remote attackers to read cached responses via requests to URLs whose...

BELL-CVE-2026-46114

Bulletin has no description...

CVE-2026-46300 net: skbuff: preserve shared-frag marker during coalescing

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skbtrycoalesce can attach paged frags from @from to @to. If @from has SKBFLSHAREDFRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backe...

GHSA-X7J8-49R8-MR43 @nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

Summary The copyProps function in lib/src/object/copy.ts uses for...in to iterate over source object properties without an Object.hasOwnProperty check, and does not filter dangerous keys proto, constructor, prototype. This allows an attacker to pollute the prototype chain of all objects in the...

PT-2026-42701

Name of the Vulnerable Software and Affected Versions @nevware21/ts-utils versions prior to 0.14.0 Description The copyProps function in lib/src/object/copy.ts iterates over source object properties using a for...in loop without performing an Object.hasOwnProperty check. Additionally, it fails to...

Insecure Default Initialization of Resource

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the hasValidToken function. An attacker can gain unauthorized access to create and modify FAQ entries,...