obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

Summary createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate a memory note's body from SQLite at the computed memory//.md path. When a note already existed at that path and was not owned by the entity being written a hand-authored note, or an orphan left by a...

GHSA-R3G7-R4HR-M258 obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

Summary createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate a memory note's body from SQLite at the computed memory//.md path. When a note already existed at that path and was not owned by the entity being written a hand-authored note, or an orphan left by a...

CVE-2026-115478

The obsidian-tc Model Context Protocol server (versions 1.0.1 through 1.31.4 ) contains a memory-lifecycle flaw where the create_entity, link_entities, rename_entity, unlink_entities, and delete_entity tools can overwrite unowned vault notes. This occurs because the software regenerates notes fro...

CVE-2026-115478 obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate memory notes from SQLite at the computed memory//.md path without reliably preserving note...

CVE-2026-115478 obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate memory notes from SQLite at the computed memory//.md path without reliably preserving note...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-lab Standalone lab for CVE-2026-109618 RCE via...

php2shell-detection

php2shell exposure assessment CVE-2026-109618 / CVE-2026-1096...

Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by Improper Encoding of Output in Apache Log4j API (CVE-2026-49844)

Summary A security vulnerability CVE-2026-49844 has been identified in Apache Log4j API, a logging library used by applications, including IBM Engineering Lifecycle Optimization - Engineering Publishing. The vulnerability is caused by improper encoding of non-finite floating-point values NaN,...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP RCE Patch-Status Tools — CVE-2026-109618 / CVE-2026-109619...

Security Bulletin: Security vulnerabilities have been found in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (GKLM)

Summary WebSphere Application Server is shipped as a component of IBM Guardium Key Lifecycle Manager GKLM. Information about security vulnerabilities affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in t...

EUVD-2026-106811

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106810

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106813

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106812

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106799

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-106786

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-106788

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106777

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...