CVE-2026-84778

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84778 WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84778

An unauthenticated Denial of Service vulnerability affects the Migrate Guru – Site Migration & Cloning WordPress plugin in versions

EUVD-2026-70572

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Migrate Guru – Site Migration & Cloning versions = 6.65...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: don't add folio to be freed to LRU in migratedevicefinalize If migration succeeded, we called foliomigrateflags-memcgroupmigrate to migrate the memcg from the old to the new folio. This will set memcgdata of the...

SUSE CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644 mm/damon/ops-common: putback folios on invalid migrate nid

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, terraform-provider-pagerduty, bento, wal-g, promxy, ksops, ferretdb, ratify, cortex, external-secrets-operator, tekton-chains, consul-k8s, kubescape, grafana, slsa-verifier, tetragon, hubble, thanos, kubescape-operator, teleport,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, sriov-network-device-plugin, terraform-provider-random, kyverno-policy-reporter-ui, gitlab-runner, pulumi-language-java, kube-arangodb, argo-rollouts, fscrypt, wal-g, crossplane-provider-family-aws, grafana-rollout-operator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, kubernetes-csi-livenessprobe, croc, pulumi-language-java, gitlab-runner, aws-flb-cloudwatch, argo-rollouts, pinact, cloud-provider-aws, crossplane-provider-family-aws, grafana-rollout-operator, kubeflow-pipelines, pgpool2exporter, cortex,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, argo-workflows, croc, aws-flb-cloudwatch, kube-arangodb, nri-postgresql, cloud-provider-aws, hivemind, otel-cli, ratify, opentelemetry-collector, cortex, certificate-transparency, jitsucom-bulker, k8sgpt, minio, manifest-tool, tekton-chains,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, argo-workflows, aws-flb-cloudwatch, kube-arangodb, otel-cli, ratify, cortex, certificate-transparency, jitsucom-bulker, k8sgpt, minio, tekton-chains, kpt, temporal-server, goreleaser, helm-operator, kubernetes-csi-external-attacher,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wal-g, grafana-rollout-operator, fulcio, ratify, k8sgpt, tekton-chains, cis-operator, nri-haproxy, cerbos, kpt, opa, helm-operator, cloud-provider-vsphere, swagger, kuberlr, thanos-operator, rabbitmq-default-user-credential-updater, oauth2-proxy, cilium-cli, glow,...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)

@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: OSV:GHSA-HF3J-86P7-MFW8...

UBUNTU-CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...

CVE-2026-64472

The CVE-2026-64472 entries describe a Linux kernel fix for vfio/mlx5: a racy bitfield layout was tightened by splitting bitfields and moving certain flags to dedicated storage units. The root cause was non-atomic bitfield operations using read-modify-write patterns, which could lead to concurrent...

SUSE CVE-2026-63914

In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrmsendmigrate in net/xfrm/xfrmuser.c and pfkeysendmigrate in net/key/afkey.c both hardcode &initnet for the multicast that announces a successful XFRMMSGMIGRATE / SADBXMIGRATE...