ECHO-DB00-4309-1170

Bulletin has no description...

ECHO-041C-12C3-789B

Bulletin has no description...

ECHO-EB5E-B491-1225

Bulletin has no description...

ECHO-471F-26DC-2062

Bulletin has no description...

ECHO-C1FF-2E31-6166

Bulletin has no description...

MINI-9PXR-5PXV-XJ5V

Bulletin has no description...

ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

A flaw was found in the ip-address library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass...

ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...

ECHO-F836-71CF-434B

Bulletin has no description...

MINI-44JR-6VC3-8CRM

Bulletin has no description...

MINI-79GG-F776-W44M

Bulletin has no description...

MINI-FC3R-5MQV-6RXX

Bulletin has no description...

MINI-WFRQ-J94W-45VH

Bulletin has no description...

MINI-9XVC-GJ8V-995X

Bulletin has no description...

MINI-WH95-4P5J-4GPV

Bulletin has no description...

MINI-X2W7-HQ2Q-94XF

Bulletin has no description...

DEBIAN-CVE-2026-49825

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

CVE-2026-49825

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

UBUNTU-CVE-2026-49825

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

UBUNTU-CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...