Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100882 advisory. The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2....

FreeBSD : PostgreSQL -- Multiple vulnerabilities (05d311bc-9991-11f1-bc50-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 05d311bc-9991-11f1-bc50-6cc21735f730 advisory. The PostgreSQL project reports: CVE-2026-6464: psql COPY FROM STDIN, if the copy fails before...

Important: bind9.18 security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

MINI-RX2W-CPGP-5VM4

Bulletin has no description...

MINI-726J-MJC6-W9M8

Bulletin has no description...

MINI-9P3P-M3QV-J7V3

Bulletin has no description...

MINI-H7G3-497M-QGHQ

Bulletin has no description...

MINI-XRR9-FVG9-7Q3C

Bulletin has no description...

MINI-75JM-X7H5-R3VM

Bulletin has no description...

MINI-H8JM-9R6M-X44M

Bulletin has no description...

MINI-HG23-RPX9-FV4W

Bulletin has no description...

MINI-R7CV-JR9Q-PWCW

Bulletin has no description...

MINI-RFV3-CXR5-6G82

Bulletin has no description...

MINI-97HQ-JQCX-5WPP

Bulletin has no description...

MINI-XGGC-G73W-42C5

Bulletin has no description...

MINI-8R67-FP44-C6FM

Bulletin has no description...

CVE-2026-74789

Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...

CVE-2026-74786

Scriban before 7.0.0 affected versions = 6.6.0 contains a denial-of-service vulnerability in which the LimitToString safety limit default 1MB can be bypassed because ObjectToString resets the per-call length counter currentToStringLength on every top-level call and StringBuilderOutput enforces no...

CVE-2026-74788

Scriban before 7.0.0 affected versions = 6.6.0 contains an uncontrolled memory allocation vulnerability in the string.padleft and string.padright template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes...

CVE-2026-73057

stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory...