CVE-2026-19039 Kino-Kafkaesque ssh-mcp-server SSH index.ts ssh_exec command injection

A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function sshexec of the file src/index.ts of the component SSH Command Handler. Performing a manipulation of the argument host/username results in command injection. The...

OPENSUSE-SU-2026:21539-1 Security update for libXfont2

This update for libXfont2 fixes the following issues: - CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. - CVE-2026-59679: fsreadglyphs heap OOB read/write via encoding array index mismatch bsc1272660...

EUVD-2026-53681

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...

DEBIAN-CVE-2026-67870

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...

ROS-20260806-73-0031

The vulnerability of the i40evsirequestirqmsix function in the drivers/net/ethernet/intel/i40e/i40emain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect index. Exploiting this vulnerability could allow an attacker to compromi...

ROOT-APP-PYPI-CVE-2026-28684 CVE-2026-28684 in python-dotenv - Patched by Root

Root has patched CVE-2026-28684 in the python-dotenv package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-49767 CVE-2024-49767 in Werkzeug - Patched by Root

Root has patched CVE-2024-49767 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-34064 CVE-2024-34064 in Jinja2 - Patched by Root

Root has patched CVE-2024-34064 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-27516 CVE-2025-27516 in Jinja2 - Patched by Root

Root has patched CVE-2025-27516 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-56201 CVE-2024-56201 in Jinja2 - Patched by Root

Root has patched CVE-2024-56201 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...

Security update for libXfont2

This update for libXfont2 fixes the following issues: CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. CVE-2026-59679: fsreadglyphs heap OOB read/write via encoding array index mismatch bsc1272660. Patch Instructions: To install this SUSE update use...

SUSE-SU-2026:3499-1 Security update for libXfont2

This update for libXfont2 fixes the following issues: - CVE-2026-44950: fsreadglyphs heap buffer overflow via cumulative glyph data overflow bsc1272661. - CVE-2026-59679: fsreadglyphs heap OOB read/write via encoding array index mismatch bsc1272660...

CVE-2026-71256 nanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via object_id

nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbsreaddeviceidentificationbasic / recvreaddeviceidentificationres in nanomodbus.c. A fixed 3-element stack array order3 = 0,1,2 maps object IDs to buffer indices. The server-supplied objectid fiel...

ROOT-APP-PYPI-CVE-2026-41182 CVE-2026-41182 in langsmith - Patched by Root

Root has patched CVE-2026-41182 in the langsmith package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48775 CVE-2026-48775 in langgraph-checkpoint - Patched by Root

Root has patched CVE-2026-48775 in the langgraph-checkpoint package for Root:PyPI. Multiple fixed versions available...

CVE-2026-61485

...

CVE-2026-61485

Apache Lucy , a Perl-based full-text search library, is affected by a Memory Allocation with Excessive Size Value vulnerability across all versions . The attack requires control over the search index , which Lucy treats as fully trusted, meaning the vulnerability is only exploitable when an attac...

Malicious code in tramvai-tinkoff-module-legacy-popup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c940ade7f46d36a0ef00f120e2c6422c6ebc810c36429935ffd538da25bf1b On require of tramvai-tinkoff-module-legacy-popup, index.js loads setup.js, which selects a platform-specific payload from a hardcoded binary map,...

The vulnerability of the go-git library, related to a countable loss of significance, allows an attacker to trigger a service failure.

The vulnerability of the go-git library is related to a countable amount of significance loss. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially created malicious .idx file...

CVE-2026-67870

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...