CVE-2026-84778

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84778 WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84778

An unauthenticated Denial of Service vulnerability affects the Migrate Guru – Site Migration & Cloning WordPress plugin in versions

EUVD-2026-70572

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Migrate Guru – Site Migration & Cloning versions = 6.65...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: don't add folio to be freed to LRU in migratedevicefinalize If migration succeeded, we called foliomigrateflags-memcgroupmigrate to migrate the memcg from the old to the new folio. This will set memcgdata of the...

SUSE CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644 mm/damon/ops-common: putback folios on invalid migrate nid

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: kubescape-operator, datadog-agent, splunk-otel-collector, terraform-provider-pagerduty, weaviate, argo-cd, bento, ferretdb, trufflehog, hubble, opentelemetry-collector-contrib, promxy, ratify, ksops, external-secrets-operator, tetragon, juicefs, cilium, thanos,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, kubeflow-katib, tempo, flux-source-controller, containerd, rook, crossplane-provider-aws-cloudformation, otel-cli, crossplane-provider-aws-cloudfront, kube-state-metrics, kubernetes-csi-driver-hostpath, knative-eventing,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: node-problem-detector, kubeflow-katib, kubernetes-replicator, tekton-pipelines, docker-machine-driver-linode, containerd, rook, crossplane-provider-aws-cloudformation, jitsucom-bulker, crossplane-provider-aws-cloudfront, continuity, kube-state-metrics,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, kubeflow-katib, http-echo, tekton-pipelines, tempo, containerd, jitsucom-bulker, opentelemetry-collector, otel-cli, container-object-storage-interface, hubble, newrelic-nri-statsd, nri-apache, prometheus-operator, telegraf, nerdctl,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, kubeflow-katib, tekton-pipelines, tempo, containerd, jitsucom-bulker, otel-cli, hubble, knative-eventing, prometheus-operator, telegraf, nerdctl, kuma, temporal-server, buildkitd, dex, rabbitmq-cluster-operator, kube-arangodb, mattermost,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, kubeflow-katib, containerd, ip-masq-agent, wire-go, nodetaint, headlamp, kubernetes-csi-driver-hostpath, hubble, nginx-prometheus-exporter, nri-apache, timescaledb-tune, prometheus-operator, aws-otel-collector, bom,...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)

@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: OSV:GHSA-HF3J-86P7-MFW8...

UBUNTU-CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...

CVE-2026-64472

The CVE-2026-64472 entries describe a Linux kernel fix for vfio/mlx5: a racy bitfield layout was tightened by splitting bitfields and moving certain flags to dedicated storage units. The root cause was non-atomic bitfield operations using read-modify-write patterns, which could lead to concurrent...

SUSE CVE-2026-63914

In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's netns xfrmsendmigrate in net/xfrm/xfrmuser.c and pfkeysendmigrate in net/key/afkey.c both hardcode &initnet for the multicast that announces a successful XFRMMSGMIGRATE / SADBXMIGRATE...