CVE-2025-8878

creationtimestamp| type| source ---|---|--- 2026-09-14 15:10:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mvifeahsnv2d...

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

CVE-2026-90787

creationtimestamp| type| source ---|---|--- 2026-09-14 14:42:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/47b5sshm46zg7...

CVE-2026-71801

creationtimestamp| type| source ---|---|--- 2026-09-14 14:22:41+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvicpf4it42q...

CVE-2026-88035

creationtimestamp| type| source ---|---|--- 2026-09-14 14:00:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...

CVE-2026-88023

creationtimestamp| type| source ---|---|--- 2026-09-14 14:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...

CVE-2026-80974

creationtimestamp| type| source ---|---|--- 2026-09-14 13:20:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvi77dv2d22l 2026-09-14 13:20:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117269594269637232...

CVE-2026-73178 Apache Syncope: JWT Access Token takeover

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Syncope. An administrator with adequate entitlements can get access via REST to the list of existing Access Tokens, including their signed JWT body. These values can be then used to perform further REST requests,...

Astra Linux – Vulnerability in Wireshark

In Wireshark versions 3.0.0 to 3.0.6, and 2.6.0 to 2.6.12, the CMS dissector could crash. This issue was addressed in the epan/dissectors/asn1/cms/packet-cms-template.c file by ensuring that an object identifier is set to NULL after the ContentInfo dissection...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ath5k: The OOB issue in ath5keepromreadpcalinfo5111 has been fixed. The bug was discovered during fuzzing. The stack trace indicates that the issue lies in ath5keepromconvertpcalinfo5111. When no curve is selected in the loop, th...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ext4: Fix for null-ptr-deref in ext4writeinfo I identified a bug involving null-ptr-deref as follows: ========================================== KASAN: null-ptr-deref in range 0x0000000000000068-0x000000000000006f CPU: 1 PID: 158...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Netwerk: Ethernet: xscale: Ensure proper check for PTP support. In ixp4xxgettsinfo, ixp46xptpfind is called unconditionally. This feature only exists in ixp46x, resulting in the following segmentation fault from tcpdump:...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: tty: Fixed out-of-bound access to vmalloc in imageblit. This issue occurs when a user-space program calls ioctl FBIOPUTVSCREENINFO, passing the fbvarscreeninfo structure containing only the fields xres, yres, and bitsperpixel wit...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fbdev: The issue was fixed by correcting fbsetvar to prevent a null-ptr dereference in fbvideomodetovar. If fbaddvideomode in fbsetvar fails to allocate memory for fbvideomode, it may lead to a null-ptr dereference in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfrm: Clearing trailing padding in buildpolexpire The buildexpire function clears the trailing padding bytes of the struct xfrmuserexpire after setting the u8 hard field using memsetafter. However, the analogous function...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac: A slab-out-of-bounds read occurred in brcmfgetassocies. This bug could occur when associnfo-reqlen, which is a value from a URB provided by a USB device, is larger than the size of the buffer, which is defined as...

CVE-2026-85979

creationtimestamp| type| source ---|---|--- 2026-09-14 12:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvi3ccrwrh2t...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cifs: Fixed the error in the length of the VALIDATENEGOTIATEINFO message. The commit code d5c7076b772a includes the following changes: - Added smb3.1.1 to the default dialect list. - Extended the number of dialects from 3 to 4. -...

Astra Linux – Vulnerability in curl

libcurl provides the CURLOPTCERTINFO option to allow applications to request details about a server’s certificate chain. Due to a faulty function, a malicious server could cause libcurl, built with NSS, to get stuck in an endless busy-loop when attempting to retrieve that information...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mt76: Fixed a use-after-free by removing a non-RCU wcid pointer. This fix addresses an issue detected by KASAN regarding use-after-free in mt76txqschedule. This was done by protecting mtxq-wcid with rculock between...