GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: cinc-auditor, kube-logging-operator...

GHSA-X2F5-4PRF-W687 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, cinc-auditor, kube-logging-operator...

CVE-2026-54171 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, gitlab-rails-ce-fips, cinc-auditor...

GHSA-X2F5-4PRF-W687 vulnerabilities

Vulnerabilities for packages: logstash, pghero-fips, gitlab-rails-ce, gitlab-rails-ce-fips, pghero, pact-broker-docker, kube-logging-operator, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54696 vulnerabilities

Vulnerabilities for packages: logstash, pghero-fips, gitlab-rails-ce, gitlab-rails-ce-fips, pghero, pact-broker-docker, kube-logging-operator, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-logging-operator, gitlab-rails-ce-fips, cinc-auditor...

GHSA-464C-974J-9XM6 AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

Summary The AWS Cloud Development Kit AWS CDK is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting encrypted: true on the S3LoggingOptions property of an AWS...

EUVD-2026-48658

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in childregionswithfirmware Move ofnodeputchildregion after the error print to avoid accessing freed memory when prerr references childregion. Yilun: Fix the Fixes tag...

laravel-threat-detection v1.4.0

Laravel Threat Detection Passive intrusion detection for Laravel — see every SQL injection, XSS, scanner, and bot probe hitting your app, logged with full context. It's an IDS, not a WAF: it never blocks, filters, or modifies a request. Drop it into any Laravel 10–13 app and it starts scanning...

Oracle Linux 10 : tomcat9 (ELSA-2026-25341)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25341 advisory. - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks sometime...

Updated dnsmasq packages fix security vulnerabilities

The updated dnsmasq packages fix multiple security issues: A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an...

MGASA-2026-0288 Updated dnsmasq packages fix security vulnerabilities

The updated dnsmasq packages fix multiple security issues: A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an...

JLSEC-2026-781

A flaw was found in libssh. The API function sshgethexa is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI Generic Security Service Application Program Interface authentication if the server's logging verbosity is se...

Improper Verification of Source of a Communication Channel

Overview @auth/core is an Authentication for the Web. Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim'...

Improper Verification of Source of a Communication Channel

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim's...

CVE-2026-64800

In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default...

PT-2026-63955

In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default...

[SECURITY] Fedora 43 Update: rust-fern-0.7.1-6.fc43

Simple, efficient logging...

[SECURITY] Fedora 44 Update: rust-fern-0.7.1-6.fc44

Simple, efficient logging...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging through the processing of undocumented git push options in the HookPostReceive function. An attacker can change the visibility or template status of a repository without triggering audit logs, webhooks, or...