CVE-2026-84445 affecting package azcopy for versions less than 10.25.1-9

CVE-2026-84445 affecting package azcopy for versions less than 10.25.1-9. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package containerized-data-importer for versions less than 1.62.0-8

CVE-2026-84304 affecting package containerized-data-importer for versions less than 1.62.0-8. A patched version of the package is available...

CVE-2026-84304 affecting package skopeo for versions less than 1.14.4-13

CVE-2026-84304 affecting package skopeo for versions less than 1.14.4-13. A patched version of the package is available...

CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...

CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9

CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9. A patched version of the package is available...

CVE-2026-72924 affecting package gh for versions less than 2.101.0-1

CVE-2026-72924 affecting package gh for versions less than 2.101.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...

CVE-2026-7598 affecting package rust for versions less than 1.96.1-2

CVE-2026-7598 affecting package rust for versions less than 1.96.1-2. A patched version of the package is available...

Astra Linux – Vulnerability in Thunderbird, Firefox

Memory safety bugs exist in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has be...

Astra Linux – Vulnerability in Firefox and Thunderbird

When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1

CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...

SWC HTML minifier may allow script element breakout when minifying embedded JSON

Impact @swc/html minifies JSON contained in script elements such as application/json and application/ld+json by parsing and serializing the JSON value. Before the patched versions, JSON serialization could convert escaped less-than signs such as \u003C into literal sequence, the generated HTML...

CVE-2026-82474 affecting package sudo for versions less than 1.9.17-3

CVE-2026-82474 affecting package sudo for versions less than 1.9.17-3. A patched version of the package is available...

CVE-2026-79992 affecting package emacs for versions less than 29.4-5

CVE-2026-79992 affecting package emacs for versions less than 29.4-5. A patched version of the package is available...

EUVD-2026-60793

Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...

CVE-2026-68315 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68315 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56289 affecting package patch for versions less than 2.7.6-10

CVE-2026-56289 affecting package patch for versions less than 2.7.6-10. A patched version of the package is available...

CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

NPM: Mermaid configuration APIs allow prototype pollution

NPM: Mermaid configuration APIs allow prototype pollution vulnerability discovered by ? in WordPress Npm mermaid versions 10.9.8...

CVE-2026-54365 CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll

CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a malicious...