Security Bulletin: Multiple security vulnerabilities identified in Containerized version of IBM Guardium Key Lifecycle Manager

Summary Multiple security vulnerabilities have been addressed in Containerized version of IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2025-6170 DESCRIPTION: A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data (CVE-2026-105442)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data vulnerability. Vulnerability Details CVEID:CVE-2026-105442 DESCRIPTION: IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Libert...

EUVD-2017-5894

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

EUVD-2017-2576

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

EUVD-2017-5895

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

EUVD-2017-2577

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

EUVD-2017-5896

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2026-109841 undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its...

CVE-2026-109841 undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its...

CVE-2026-109841

undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its...

CVE-2026-109841 undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its...

CVE-2026-109841

undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its...

CVE-2026-109841

The undici HTTP client library for Node.js (versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1 ) contains a vulnerability in its fetch() implementation. The library incorrectly handles case sensitivity when verifying Subresource Integrity (SRI) metadata, treating valid but non-lowercase algo...

pfsense-separator-color-xss

abraxaslabs.tech · github.com/abraxas ·&...

pfsense-rules-if-xss

abraxaslabs.tech · github.com/abraxas ·&...

pfsense-logs-filter-xss

abraxaslabs.tech · github.com/abraxas ·&...

Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about multiple vulnerabilities affecting WebSphere Application Server have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Jackson Core

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in Jackson Core. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-68494 DESCRIPTION: The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length...

Security Bulletin: IBM SPSS Modeler is affected by a Jackson-core denial-of-service vulnerability that may cause excessive memory consumption from crafted JSON input

Summary IBM SPSS Modeler is affected by a Jackson-core denial-of-service vulnerability that may cause excessive memory consumption from crafted JSON input. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-89425 DESCRIPTION:...

CVE-2026-18040

A flaw was found in Bouncy Castle. The Hamming Quasi-Cyclic HQC cryptographic algorithm leaks secret data through memory cache access patterns and execution timing variations during key encapsulation and decapsulation operations. A local attacker capable of monitoring cache activity or measuring...