Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability ​

Summary The security issue described in CVE-2026-10842 has been identified in WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affect...

K000162799: Linux Kernel vulnerability CVE-2026-63798

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove The driver allocates domain generic chips using irqallocdomaingenericchips during probe and sets up chained handlers...

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server traditional is affected by multiple vulnerabilities

Summary The security issue described in CVE-2026-14981, CVE-2026-15064, CVE-2026-15328 and CVE-2026-15325 has been identified in WebSphere Application Server traditional included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the...

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server is affected by a server-side request forgery (CVE-2026-14529)

Summary The security issue described in CVE-2026-14529 has been identified in WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affecte...

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server is affected by a privilege escalation (CVE-2026-14446) ​

Summary The security issue described in CVE-2026-14446 has been identified in WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affect...

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server is affected by an authentication bypass (CVE-2026-16184) ​

Summary The security issue described in CVE-2026-16184 has been identified in WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affect...

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information (CVE-2026-14512, CVE-2026-14528)

Summary The security issue described in CVE-2026-14512, CVE-2026-14528 has been identified in WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

Exploit for CVE-2025-30374

CVE-2025-30374 Class Pollution Vulnerability in Taipy Lea...

Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway

Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate of CVE-2026-48779. CWE:CWE-770:...

Security update for php8

This update for php8 fixes the following issues: Update to version 8.2.33. Security issues fixed: CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion bsc1273077. CVE-2026-9672: security issues in libgd bsc1273078. CVE-2026-17543:...

SUSE-SU-2026:3514-1 Security update for php8

This update for php8 fixes the following issues: Update to version 8.2.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion bsc1273077. - CVE-2026-9672: security issues in libgd bsc1273078. -...

Security Bulletin: Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

Summary Langflow OSS includes outbound network request functionality for provider validation and API request execution. Weaknesses in request destination validation and enforcement could allow authenticated users to induce requests to unintended internal or external network locations, which may...

Security Bulletin: Langflow OSS is affected by stored cross-site scripting in image file handling

Summary Langflow OSS serves user-provided image content as part of its file handling features. Improper handling of SVG image content could allow stored script execution when malicious image files are viewed, which may expose session information or permit actions in the context of another user...

Security Bulletin: Langflow is affected by weaknesses in secret handling and sensitive configuration access

Summary Langflow includes features for secret protection, environment access, and runtime configuration of workflow components. Weaknesses in cryptographic key handling, exposure of process environment values, and insufficient restriction of sensitive runtime configuration fields could allow...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Summary Langflow OSS supports custom Python components and validation of component code for component development workflows. Weaknesses in custom component execution paths, validation endpoints, and trusted template enforcement could allow authenticated users to execute arbitrary Python code or...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Summary Langflow OSS supports Agentic Assistant generated components and user-supplied custom Python components for workflow development. Weaknesses in code security scanning, runtime validation, custom component execution paths, and trusted code enforcement could allow authenticated users to...

Security Bulletin: Multiple security vulnerabilities related to logback-core have been resolved in IBM Informix WireListener and Java Foundation.

Summary IBM Informix has updated logback-core to the latest version to address several logback-core vulnerabilities in IBM Informix versions 15.0.1.12 and 14.10.xC13W12. Vulnerability Details CVEID:CVE-2026-9828 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback...

K000162796: Linux Kernel vulnerability CVE-2026-63825

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge global branch counters with loop induction variables as an optimization. In inflatefast, the inn...

Malicious code in spl-token-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95b625c92e85b1c0d5c10a192c70f8f82cf8d3b2ac7b66c034635b680785654 On require, index.js serializes the full process.env together with hostname, username, homedir, platform, cwd, and package metadata, base64-encodes t...

MAL-2026-13351 Malicious code in spl-token-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95b625c92e85b1c0d5c10a192c70f8f82cf8d3b2ac7b66c034635b680785654 On require, index.js serializes the full process.env together with hostname, username, homedir, platform, cwd, and package metadata, base64-encodes t...