bpf_jit_prog_releaseother Heap Buffer Overflow DoS

The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports BPF interpreter for Linux kernel, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel BPF Tracing Buffer Overflow DoS

The vulnerability of the bpftracingprogattach function in the kernel/bpf/syscall.c module, which supports the BPF interpreter for Linux kernels, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

bpf DoS

The vulnerability of the btfcheckdtorkfuncs function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to cause service failures...

bpf kernel BPF DoS

The vulnerability of the btftypeisfwd function in the kernel/bpf/btf.c module, which supports BPF interpreter for Linux kernel, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

BPF Kernel Heap Buffer Overflow DoS

The vulnerability of the insnarraymapdirectvalueaddr function in the kernel/bpf/bpfinsnarray.c module, which is part of the BPF interpreter for Linux kernel, involves a pointer overflow that causes the pointer to go beyond the allocated memory range. Exploiting this vulnerability could allow an...

Linux BPF Heap Buffer Overflow DoS

The vulnerability of the bpfprogverifysignature function in the kernel/bpf/syscall.c module, which is part of the BPF interpreter support for Linux operating systems, involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security update for pyenv (moderate)

openSUSE Security Update: Security update for pyenv Announcement ID: openSUSE-SU-2026:0311-1 Rating: moderate References: 1275661 Cross-References: CVE-2026-68939 CVSS scores: CVE-2026-68939 SUSE: 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP7 An...

openSUSE 16: pyenv / pyenv-bash-completion / pyenv-fish-completion / etc (openSUSE-SU-2026:21664-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21664-1 advisory. Changes in pyenv: - CVE-2026-68939: a matching attacker-controlled file can silently select a different installed interpreter or version bsc1275661...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by CVE-2026-37004 via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: CVE-2026-37004 Source advisory: OSV:GHSA-6WVF-77M9-58RM...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-37004 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-37004 Source advisory: OSV:GHSA-6WVF-77M9-58RM...

OPENSUSE-SU-2026:21664-1 Security update for pyenv

This update for pyenv fixes the following issues: Changes in pyenv: - CVE-2026-68939: a matching attacker-controlled file can silently select a different installed interpreter or version bsc1275661...

GO-2026-6292 mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist in github.com/sonirico/mcp-shell

mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist in github.com/sonirico/mcp-shell...

[SECURITY] Fedora 44 Update: python3.10-3.10.21-1.fc44

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

[SECURITY] Fedora 44 Update: python3.11-3.11.16-1.fc44

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

[SECURITY] Fedora 43 Update: python3.10-3.10.21-1.fc43

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

Fedora 44 : python3.10 (2026-7ef4d2b23d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7ef4d2b23d advisory. Security release of Python 3.10 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 43 : python3.11 (2026-22170bd5c0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22170bd5c0 advisory. Security release of Python 3.11 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 43 : python3.12 (2026-7de2b1cfc5)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7de2b1cfc5 advisory. A security update of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

EUVD-2026-65550

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCPSHELLSECCONFIGFILE is unset, main.go starts the documented bare-binary deployment without a security policy...

Linux BPF Heap Buffer Overflow DoS

The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...