CVE-2026-68259

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

CVE-2026-68259

CVE-2026-68259 affects the Linux kernel's DRM/amdkfd path, specifically allocate_event_notification_slot. The vulnerability arises from not validating the upper bound of user-supplied event IDs used by CRIU; valid IDs are 0 to KFD_SIGNAL_EVENT_LIMIT. The fix adds bounds checks, ensuring the upper...

CVE-2026-68259 drm/amdkfd: Check bounds in allocate_event_notification_slot

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

EUVD-2026-55294

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...

CVE-2026-72918: Missing Authorization

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user stream in the WebSocket protocol allows an authenticated user to write arbitrary notification bodies because the sender ...

PT-2026-69987

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 7.10.14 Rocket.Chat versions prior to 8.0.8 Rocket.Chat versions prior to 8.1.7 Rocket.Chat versions prior to 8.2.7 Rocket.Chat versions prior to 8.3.7 Rocket.Chat versions prior to 8.4.5 Rocket.Chat versions prio...

PT-2026-69659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the allocate event notification slot function fails to perform bounds checking on the event id specified for allocation. This...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: crossplane, kyverno, pulumi-language-dotnet, kubescape-server-fips, cloudbeat-fips, nuclei, trivy-operator-fips, cloudbeat, flux, trivy-operator, pulumi, coder, src-fingerprint, grype, rancher-fleet, witness, chainloop-cli-fips, gitlab-rails-ce-fips, gptscript,...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: crossplane, kyverno, pulumi-language-dotnet, kubescape-server-fips, cloudbeat-fips, nuclei, trivy-operator-fips, cloudbeat, flux, trivy-operator, pulumi, coder, src-fingerprint, grype, rancher-fleet, witness, chainloop-cli-fips, gitlab-rails-ce-fips, gptscript,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno, pulumi-language-dotnet, kubescape-server-fips, cloudbeat-fips, nuclei, trivy-operator-fips, cloudbeat, flux, trivy-operator, pulumi, coder, src-fingerprint, grype, rancher-fleet, witness, chainloop-cli-fips, gitlab-rails-ce-fips, gptscript,...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno, pulumi-language-dotnet, kubescape-server-fips, cloudbeat-fips, nuclei, trivy-operator-fips, cloudbeat, flux, trivy-operator, pulumi, coder, src-fingerprint, grype, rancher-fleet, witness, chainloop-cli-fips, gitlab-rails-ce-fips, gptscript,...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: flux-source-controller, argo-workflows, trivy-operator, kaniko, syft, flux-notification-controller, rancher-fleet, argo-events, pulumi-language-dotnet, snyk-cli, trufflehog, boring-registry, kyverno, argo-cd, external-secrets-operator, skaffold, trivy, witness, nucle...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: flux-source-controller, argo-workflows, trivy-operator, kaniko, syft, flux-notification-controller, rancher-fleet, argo-events, pulumi-language-dotnet, snyk-cli, trufflehog, boring-registry, kyverno, argo-cd, external-secrets-operator, skaffold, trivy, witness, nucle...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: flux-source-controller, argo-workflows, trivy-operator, kaniko, syft, flux-notification-controller, rancher-fleet, argo-events, pulumi-language-dotnet, snyk-cli, trufflehog, boring-registry, kyverno, argo-cd, external-secrets-operator, skaffold, trivy, witness, nucle...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: flux-source-controller, argo-workflows, trivy-operator, kaniko, syft, flux-notification-controller, rancher-fleet, argo-events, pulumi-language-dotnet, snyk-cli, trufflehog, boring-registry, kyverno, argo-cd, external-secrets-operator, skaffold, trivy, witness, nucle...

CVE-2026-66000

Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, Document Follow notification generation does not re-evaluate the recipient's current document permissions, allowing users whose access was revoked or reduced to continue receiving document data by email. This issue i...

CVE-2026-66000 Frappe: Unrestricted access to Document Follow APIs

Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, Document Follow notification generation does not re-evaluate the recipient's current document permissions, allowing users whose access was revoked or reduced to continue receiving document data by email. This issue i...

CVE-2026-47361

In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...

CVE-2026-47361

The Datadog Android application (versions prior to v541-5.9.2 ) contains a vulnerability where BubbleChatActivity is exported without a permission guard. This component improperly accepts a SEND intent containing a caller-supplied conversation_id . When the activity closes and no matching in-proc...

CVE-2026-47361

In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...