Astra Linux – Vulnerability in Git

Git is a revision control system. Before versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, feeding specially crafted input to git apply --reject could cause a path outside the working tree to be overwritten with partially controlled contents...

CVE-2026-54073

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

CVE-2026-54073 VeraCrypt: Hidden volume quick format weakens plausible deniability

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

EUVD-2026-64057

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

CVE-2026-54073

VeraCrypt versions 1.26.6 through 1.26.29 are affected by a flaw in file-hosted hidden volume creation. The FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at predictable 128 MiB intervals , bypassing the normal Encry...

CVE-2026-54073 VeraCrypt: Hidden volume quick format weakens plausible deniability

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

CVE-2026-0292

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iO...

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Cisco Secure Firewall Adaptive Security Appliance ASA and Secure Firewall Threat Defense FTD contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses js-yaml which is vulnerable to CVE-2025-64718, CVE-2026-53550, CVE-2026-59869

Summary IBM Maximo Application Suite - Visual Inspection component uses js-yaml which is vulnerable to CVE-2025-64718, CVE-2026-53550, CVE-2026-59869, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-53550 DESCRIPTION: js-yam...

Malicious code in @ccfly/setup-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d11825a61bed068425296e83dcc0c87427579f7b5d724ec52e5e87465f2b5 The package ships a prebuilt darwin/x64 Mach-O binary containing a Go agent module github.com/ccfly/rescue that, when executed, connects to a hardcod...

MAL-2026-12313 Malicious code in @ccfly/setup-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d11825a61bed068425296e83dcc0c87427579f7b5d724ec52e5e87465f2b5 The package ships a prebuilt darwin/x64 Mach-O binary containing a Go agent module github.com/ccfly/rescue that, when executed, connects to a hardcod...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/sys-v0.38.0 which is vulnerable to CVE-2026-39824.

Summary IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/sys-v0.38.0 which is vulnerable to CVE-2026-39824. This bulletin contains information regarding the vulnerability and its remediation Vulnerability Details CVEID:CVE-2026-39824 DESCRIPTION: NewNTUnicodeString doe...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.47.0 which is vulnerable to CVE-2026-33814

Summary IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.47.0 which is vulnerable to CVE-2026-33814. This bulletin contains information regarding the vulnerability and its remediation Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pacote which is vulnerable to CVE-2026-9496

Summary IBM Maximo Application Suite - Visual Inspection component uses pacote which is vulnerable to CVE-2026-9496, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-9496 DESCRIPTION: Versions of the package pacote from 11.2....

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920, CVE-2026-4372

Summary IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920,CVE-2026-4372. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2025-14920 DESCRIPTION: Huggi...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses brace-expansion which is vulnerable to CVE-2026-13149

Summary IBM Maximo Application Suite - Visual Inspection component uses brace-expansion which is vulnerable to CVE-2026-13149, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 ...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses form-data which is vulnerable to CVE-2026-12143

Summary IBM Maximo Application Suite - Visual Inspection component uses form-data which is vulnerable to CVE-2026-12143, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/crypto-v0.45.0 which is vulnerable to multiple vulnerabilities

Summary IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/crypto-v0.45.0 which is vulnerable to CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.47.0 which is vulnerable to CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506

Summary IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.47.0 which is vulnerable to CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506, This bulletin contains information regarding the vulnerability an...

SUSE CVE-2026-50197

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...