Linux Distros Unpatched Vulnerability : CVE-2026-11721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. Thi...

OPENSUSE-SU-2026:21441-1 Security update for distribution

This update for distribution fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266629. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

EUVD-2024-55700

Cal.com calcom/cal.diy versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking view e.g., https://app.cal.com/booking/ renders booking-question field labels via React's dangerouslySetInnerHTML without sanitizing or escaping user input. An attacker who can...

EUVD-2024-55698

Cal.com repository calcom/cal.diy in versions . Booking question form field labels are rendered via React's dangerouslySetInnerHTML without proper input sanitization or CSP, so an attacker who can create an event type with a malicious booking question label can inject arbitrary HTML/JavaScript th...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21395-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21395-1 advisory. This update for trivy fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels...

SUSE SLES15 Security Update : google-guest-agent (SUSE-SU-2026:3210-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3210-1 advisory. This update for google-guest-agent fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...

Security update for gh (important)

openSUSE security update: security update for gh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21432-1 Rating: important References: bsc1266618 Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4...

SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2026:3209-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3209-1 advisory. This update for google-osconfig-agent fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only...

CVE-2024-58353

Cal.com repository calcom/cal.diy in versions . Booking question form field labels are rendered via React's dangerouslySetInnerHTML without proper input sanitization or CSP, so an attacker who can create an event type with a malicious booking question label can inject arbitrary HTML/JavaScript th...

CVE-2024-58355

Cal.com calcom/cal.diy versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking view e.g., https://app.cal.com/booking/ renders booking-question field labels via React's dangerouslySetInnerHTML without sanitizing or escaping user input. An attacker who can...

OPENSUSE-SU-2026:21432-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...

CVE-2024-58353 Cal.com through 4.7.15 Cross-Site Scripting via booking questions

Cal.com repository calcom/cal.diy in versions . Booking question form field labels are rendered via React's dangerouslySetInnerHTML without proper input sanitization or CSP, so an attacker who can create an event type with a malicious booking question label can inject arbitrary HTML/JavaScript th...

CVE-2024-58353

Cal.com repository calcom/cal.diy in versions = 4.7.15 is vulnerable to cross-site scripting XSS on the publicly accessible single booking view e.g., /booking/. Booking question form field labels are rendered via React's dangerouslySetInnerHTML without proper input sanitization or CSP, so an...

CVE-2024-58353

Cal.com (repository calcom/cal.diy) prior to 4.7.16 is affected by XSS in the publicly accessible single booking view (/booking/). The booking form labels are rendered via React dangerouslySetInnerHTML without input sanitization or CSP, enabling an attacker who can create an event type with a mal...

CVE-2024-58353 Cal.com through 4.7.15 Cross-Site Scripting via booking questions

Cal.com repository calcom/cal.diy in versions . Booking question form field labels are rendered via React's dangerouslySetInnerHTML without proper input sanitization or CSP, so an attacker who can create an event type with a malicious booking question label can inject arbitrary HTML/JavaScript th...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.2 release

Red Hat OpenShift distributed tracing platform Tempo 3.10.2 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides security improvements. Breaking changes: None Deprecations: None Technology Preview features: None Enhancements: None Bug fixes: Punycode...

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

CVE-2026-52688 RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

CVE-2026-52688

Technical details for CVE-2026-52688 are not publicly available in the provided documents; monitor for updates.

SUSE SLES15 Security Update : terraform-provider-susepubliccloud (SUSE-SU-2026:3198-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3198-1 advisory. This update for terraform-provider-susepubliccloud fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject...