ROOT-OS-DEBIAN-13-CVE-2026-1761 CVE-2026-1761 in libsoup3 - Patched by Root

Root has patched CVE-2026-1761 in the libsoup3 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-73074 CVE-2026-73074 in vim - Patched by Root

Root has patched CVE-2026-73074 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-35177 CVE-2026-35177 in vim - Patched by Root

Root has patched CVE-2026-35177 in the vim package for Root:Debian:11. Multiple fixed versions available...

DEBIAN-CVE-2026-82631

A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexit...

CVE-2026-82665 yaojingang GEOFlow Image Library Cleanup ImageLibraryController.php unlink path traversal

A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the function unlink of the file app/Http/Controllers/Admin/ImageLibraryController.php of the component Image Library Cleanup. The manipulation of the argument filepath results in path traversal. The attack...

EUVD-2026-68434

A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the function unlink of the file app/Http/Controllers/Admin/ImageLibraryController.php of the component Image Library Cleanup. The manipulation of the argument filepath results in path traversal. The attack...

CVE-2026-82665

yaojingang GEOFlow (up to 2.1.0) contains a path traversal vulnerability in the Image Library Cleanup component. The flaw resides in the unlink function of app/Http/Controllers/Admin/ImageLibraryController.php, where an attacker who controls the file_path argument can delete files outside the int...

DEBIAN-CVE-2026-82623

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

ROOT-OS-ALPINE-318-CVE-2026-11822 CVE-2026-11822 in sqlite - Patched by Root

Root has patched CVE-2026-11822 in the sqlite package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2026-11824 CVE-2026-11824 in sqlite - Patched by Root

Root has patched CVE-2026-11824 in the sqlite package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63385 CVE-2026-63385 in libevent - Patched by Root

Root has patched CVE-2026-63385 in the libevent package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63382 CVE-2026-63382 in libevent - Patched by Root

Root has patched CVE-2026-63382 in the libevent package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

ROOT-OS-DEBIAN-11-CVE-2026-63385 CVE-2026-63385 in libevent - Patched by Root

Root has patched CVE-2026-63385 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63382 CVE-2026-63382 in libevent - Patched by Root

Root has patched CVE-2026-63382 in the libevent package for Root:Debian:11. Multiple fixed versions available...

MAL-2026-15602 Malicious code in redis-cookie-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c94026a508b2ada8c891551c8ccd622f86c2ba2e7b6a7c181fc3eb538e2f1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...