DEBIAN-CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

MINI-QF7X-7628-5JV7

Bulletin has no description...

MINI-JV49-7998-F4CF

Bulletin has no description...

BELL-CVE-2026-64590

Bulletin has no description...

MINI-J66X-PMWF-89FF

Bulletin has no description...

MINI-XCFM-57F5-PR5R

Bulletin has no description...

MINI-239W-WV4F-PX8C

Bulletin has no description...

DEBIAN-CVE-2026-67339

guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...

DEBIAN-CVE-2026-67314

axios versions =1.15.2 and 1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling lib/adapters/http.js and lib/helpers/resolveConfig.js. When an application is already affected by a separate prototype-pollution primitive and makes an axios request with an own auth...

DEBIAN-CVE-2026-9672

Bulletin has no description...

DEBIAN-CVE-2026-58039

A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and 26...

ECHO-789B-04F9-51D1

Bulletin has no description...

MINI-P4HR-XCW2-3VF2

Bulletin has no description...

BELL-CVE-2026-64386

Bulletin has no description...

BELL-CVE-2026-64523

Bulletin has no description...

BELL-CVE-2026-64539

Bulletin has no description...

BELL-CVE-2026-64217

Bulletin has no description...

MINI-XVRM-X98P-5MG8

Bulletin has no description...

DEBIAN-CVE-2026-64393

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

DEBIAN-CVE-2026-64288

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB VNCR TLB invalidation occurs from MMU notifiers or TLBI instructions, and either can race against a vcpu not being onlined yet no pseudo-TLB allocated. Similarly, the TLB...