749 matches found
CLSA-2026-1790866103 TuxCare security update for immutable (1 CVE)
TuxCare rebuilt immutable to address 1 CVE. Fixed in 3.7.6-tuxcare.2...
PT-2026-110286
TuxCare rebuilt immutable to address 1 CVE. Fixed in 3.7.6-tuxcare.2...
CLSA-2026-1790808099 TuxCare security update for immutable (2 CVEs)
TuxCare rebuilt immutable to address 2 CVEs. Fixed in 3.7.6-tuxcare.1...
Security Bulletin: Vulnerabilities in netty-codec, spring-webflux, spring-data, Spring MVC, Immutable and ACE might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in netty-codec, spring-webflux, spring-data, Spring MVC, Immutable and ACE. Vulnerabilities include Netty can cause native memory exhaustion, An attacker can bypass the short-circuit mechanism by sending a reques...
PT-2026-109980
TuxCare rebuilt immutable to address 2 CVEs. Fixed in 3.7.6-tuxcare.1...
CLEANSTART-2026-BB25914 Immutable
Security vulnerability affects the argo-workflows package. Immutable...
CLEANSTART-2026-BI32681 Immutable
Security vulnerability affects the argo-workflows package. Immutable...
CLSA-2026-1790084679 TuxCare security update for immutable (2 CVEs)
TuxCare rebuilt immutable to address 2 CVEs. Fixed in 5.1.5-tuxcare.1...
PT-2026-105332
TuxCare rebuilt immutable to address 2 CVEs. Fixed in 5.1.5-tuxcare.1...
Modification of Assumed-Immutable Data (MAID)
Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID in the Object.getOwnPropertyDescriptor or lookupSetter process. An attacker can modify properties that we...
polaris v10.2.3
Polaris is an open source policy engine for Kubernetes Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the...
Astra Linux – Vulnerability in python-cryptography
Cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions, Cipher.updateinto would accept Python objects that implement the buffer protocol, but only provide immutable buffers. This would allow immutable objects such as bytes to b...
CLSA-2026-1788775607 TuxCare security update for immutable (1 CVE)
TuxCare rebuilt immutable to address 1 CVE. Fixed in 3.8.3-tuxcare.2...
PT-2026-95032
TuxCare rebuilt immutable to address 1 CVE. Fixed in 3.8.3-tuxcare.2...
Optimistic Locking/version Validation Bypass
Spring Data REST is vulnerable to improper handling of the persisted @Version property during HTTP PUT requests against immutable target types. The vulnerability is due to Spring Data REST failing to preserve the persisted version value of an aggregate root when processing a PUT request, which...
CVE-2026-82398 pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...
EUVD-2026-66820
Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...
CVE-2026-47850
Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...
CVE-2026-47850: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...
CVE-2026-47850
Spring Data REST does not preserve the persisted @Version property of an aggregate root when handling an HTTP PUT against an immutable target type, allowing mutation of the version field. The issue is rated MEDIUM (CVSS 4.3) with a low integrity impact. Affected versions include 5.1.0 , 5.0.0–5.0...