CLEANSTART-2026-VB99364 Security fixes in loki 3.6.10-r1

Package loki version 3.6.10-r1 fixes 1 vulnerabilities: CVE-2026-40179...

CLEANSTART-2026-QH72886 Security fixes in ollama-fips 0.19.0-r3

Package ollama-fips version 0.19.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-RU88725 Security fixes in modelmesh-runtime-adapter 0.12.0-r3

Package modelmesh-runtime-adapter version 0.12.0-r3 fixes 1 vulnerabilities: ghsa-m5vv-6r4h-3vj9...

CLEANSTART-2026-OQ54601 Security fixes in step-cli 0.29.0-r0

Package step-cli version 0.29.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-IZ40410 Security fixes in apko 1.2.3-r0

Package apko version 1.2.3-r0 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...

CLEANSTART-2026-XE45099 Security fixes in argo-cd-fips 3.3.2-r1

Package argo-cd-fips version 3.3.2-r1 fixes 1 vulnerabilities: CVE-2026-1229...

CLEANSTART-2026-LO95045 Security fixes in syft 1.39.0-r3

Package syft version 1.39.0-r3 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-OD53116 Security fixes in terragrunt-fips 1.0.1-r1

Package terragrunt-fips version 1.0.1-r1 fixes 1 vulnerabilities: ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-YT06895 Security fixes in kafka 4.0.1-r1

Package kafka version 4.0.1-r1 fixes 1 vulnerabilities: ghsa-72hv-8253-57qq...

CLEANSTART-2026-DY40062 Security fixes in kubernetes 1.32.9-r0

Package kubernetes version 1.32.9-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-JI09100 Security fixes in rekor-fips 1.4.3-r0

Package rekor-fips version 1.4.3-r0 fixes 1 vulnerabilities: ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-LA63432 Security fixes in tomcat9 9.0.71-r0

Package tomcat9 version 9.0.71-r0 fixes 1 vulnerabilities: CVE-2023-24998...

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities in question are listed below -...

Off-by-one Error

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Off-by-one Error

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

CVE-2023-25148

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. Please note: an attacker must first obtain the ability to...

CVE-2021-33688

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained...

CVE-2020-24564

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-59718link is external Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability This type of vulnerability is a frequent atta...

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is a itsourcecode open source online cake ordering system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from an incorrect manipulation of the parameter supplier in the file...