DEBIAN-CVE-2026-73627

JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by making direct requests to the /lab/api/plugins endpoint, enabling or...

CVE-2026-73627

JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by making direct requests to the /lab/api/plugins endpoint, enabling or...

CVE-2026-73627

CVE-2026-73627 describes a bypass in JupyterLab’s plugin manager lock-rule enforcement. Affected product: JupyterLab (pip package jupyterlab) versions 4.1.0–4.5.9 and 4.6.0–4.6.1. Root cause: two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by is...

CVE-2026-73627 JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass

JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by making direct requests to the /lab/api/plugins endpoint, enabling or...

EUVD-2026-57796

JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by making direct requests to the /lab/api/plugins endpoint, enabling or...

Linux Distros Unpatched Vulnerability : CVE-2026-68438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d smp: Improve...

CVE-2026-72797 SiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatus

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint that returns encrypted notebook identifiers, names, and lock states without publish-access filtering. Anonymous readers and publish-mode accounts can enumerate all encrypted...

K000162877: NLnet Labs Unbound vulnerability CVE-2026-44390

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suffix above...

CVE-2026-73288

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/objectlock/objectlocksys.rs lets checkobjectlockfordeletion, deleteprefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable .metadata.bin...

EUVD-2026-57233

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/objectlock/objectlocksys.rs lets checkobjectlockfordeletion, deleteprefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable .metadata.bin...

CVE-2026-73288 RustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/objectlock/objectlocksys.rs lets checkobjectlockfordeletion, deleteprefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable .metadata.bin...

CVE-2026-73288

CVE-2026-73288 affects RustFS prior to 1.0.0-rc.1, where Object Lock enforcement in crates/ecstore/src/bucket/object_lock/objectlock_sys.rs misclassifies ConfigNotFound, unreadable .metadata.bin data, or unparseable metadata as no lock configuration. This allows objects under COMPLIANCE retention...

CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

EUVD-2026-57046

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438 smp: Make CSD lock acquisition atomic for debug mode

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438 smp: Make CSD lock acquisition atomic for debug mode

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438

The CVE-2026-68438 entry describes a Linux kernel issue in smp_call_function_single() related to the CSD lock diagnostic path. When CSD lock debugging is enabled, the patch makes CSD_FLAG_LOCK acquisition atomic via try_cmpxchg_acquire(), turning the previously non-atomic read-modify-write into a...

PT-2026-70952

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smp call function single CSD-lock diagnostics" changed smp call function single so that, when CSD lock debugging is enabled, async !wait calls...

PT-2026-71091

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/object lock/objectlock sys.rs lets check object lock for deletion, delete prefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable...