Important: bind9.18 security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

The vulnerability in the `arch/mips/kernel/relocate.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the arch/mips/kernel/relocate.c component of the Linux operating system relates to the pointer relocation beyond the allocated memory range. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entry replacement CVE-2026-45945 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked...

Important: jackson-core

Issue Overview: The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of...

MINI-726J-MJC6-W9M8

Bulletin has no description...

MINI-RX2W-CPGP-5VM4

Bulletin has no description...

MINI-9P3P-M3QV-J7V3

Bulletin has no description...

MINI-H7G3-497M-QGHQ

Bulletin has no description...

MINI-XRR9-FVG9-7Q3C

Bulletin has no description...

MINI-75JM-X7H5-R3VM

Bulletin has no description...

MINI-H8JM-9R6M-X44M

Bulletin has no description...

MINI-HG23-RPX9-FV4W

Bulletin has no description...

MINI-97HQ-JQCX-5WPP

Bulletin has no description...

MINI-R7CV-JR9Q-PWCW

Bulletin has no description...

MINI-RFV3-CXR5-6G82

Bulletin has no description...

MINI-8R67-FP44-C6FM

Bulletin has no description...

MINI-XGGC-G73W-42C5

Bulletin has no description...

CVE-2026-74789

Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...

CVE-2026-74786

Scriban before 7.0.0 affected versions = 6.6.0 contains a denial-of-service vulnerability in which the LimitToString safety limit default 1MB can be bypassed because ObjectToString resets the per-call length counter currentToStringLength on every top-level call and StringBuilderOutput enforces no...

CVE-2026-74788

Scriban before 7.0.0 affected versions = 6.6.0 contains an uncontrolled memory allocation vulnerability in the string.padleft and string.padright template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes...