incus-os

Introduction IncusOS is an immutable OS image dedicated to running Incus. It's based on Debian 13 and built using mkosi. IncusOS can be installed on modern amd64 x8664 and arm64 systems. This aims at providing a very fast, safe and reliable way to run an Incus server. It's got a strong focus on...

CVE-2025-27893

CVE-2025-27893: External Control of Assumed-Immutable Web Parameter in Archer Platform Description In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such as the creation date, by intercepting and modifying a Copy...

CVE-2026-99084

In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable directory iteratedir takes the directory's irwsem shared and holds it across -iterateshared. For a directory that never has an entry and is never removed the lock keeps nothing still, i...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 7.1. It stems from holding an inode lock for too long when reading from an immutable directory. Attackers can delay the getdents response via FUSE mounting, thereby blocking directory lookup, creation, and mounting operations, leading to a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.43 security and extras update

Red Hat OpenShift Container Platform release 4.20.43 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

CLSA-2026-1792163804 TuxCare security update for immutable (2 CVEs)

TuxCare rebuilt immutable to address 2 CVEs. Fixed in 4.3.8-tuxcare.1...

PT-2026-124991

TuxCare rebuilt immutable to address 2 CVEs. Fixed in 4.3.8-tuxcare.1...

Microsoft Identity Web Authorization Vulnerability

The Microsoft Identity Web component has an authorization issue. This vulnerability stems from the use of assumed-immutable data, which allows authentication bypasses. It may enable authorized attackers to escalate their privileges through the network...

PT-2026-113722

Name of the Vulnerable Software and Affected Versions AmazonPay Plugin for EC-CUBE 4 series affected versions not specified Description An issue exists where an assumed-immutable web parameter is under external control. This allows an attacker to redirect users to an arbitrary website during the...

CVE-2026-103080

External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data Manipulation.This issue affects Salevo: from n/a through 1.3.0...

Modification of Assumed-Immutable Data (MAID)

Overview msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID via the readInt64BE function in lib/decoder.js, which mutates the input buffer in-place when...

Modification of Assumed-Immutable Data (MAID)

Overview org.webjars.npm:msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID via the readInt64BE function in lib/decoder.js, which mutates the input buffer...

ROOT-APP-NPM-CVE-2026-59880 CVE-2026-59880 in immutable - Patched by Root

Root has patched CVE-2026-59880 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59879 CVE-2026-59879 in immutable - Patched by Root

Root has patched CVE-2026-59879 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-281048 AIKIDO-2026-281048 in immutable - Patched by Root

Root has patched AIKIDO-2026-281048 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-428611 AIKIDO-2026-428611 in immutable - Patched by Root

Root has patched AIKIDO-2026-428611 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-29063 CVE-2026-29063 in immutable - Patched by Root

Root has patched CVE-2026-29063 in the immutable package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 security and extras update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

Security Bulletin: Vulnerability in immutable bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the immutable library, which is affected by a denial of service vulnerability. CVE-2026-59879, CVE-2026-59880. Vulnerability Details CVEID:CVE-2026-59879 DESCRIPTION: Immutable.js provides many Persistent Immutable data...