CVE-2026-53495

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

UBUNTU-CVE-2026-53495

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

Astra Linux – Vulnerability in qtbase-opensource-src

A issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. There is an incorrect HPack integer overflow check in network/access/http2/hpacktable.cpp...

An Empirical Security Analysis of Open-Source Software Used in Onboard Satellite Systems

The use of open-source software OSS in satellite flight systems is increasing as missions adopt reusable frameworks, shared libraries, and community-maintained components. While this accelerates development, it also introduces software-security risks into systems where patching is costly and...

espectre snapshot

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

thingsboard v4.3.1.5

All-in-one IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Gettin...

semgrep v1.177.0

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

tailscale v1.102.4

Tailscale https://tailscale.com Private WireGuard® networks made easy Overview This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees ...

fleet fleet-v4.91.1

News · Report a bug · Docs · Why open source? · Art Open-source platform for IT and security teams with thousands of computers. Designed for APIs, GitOps, webhooks, YAML, and humans. What's it for? Fleet gives you a single system to secure and maintain all your computing devices over the air. You...

cynative v1.11.3

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Built-in agents · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning throu...

MISP v2.5.46

MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...

appsandbox v0.1.5

App Sandbox App Sandbox is a virtual machine app for Windows and macOS that's focused on performance and ease of use. Windows features: Works on Windows 11 Home or Pro, without Hyper-V Windows 11 or Ubuntu 26.04 LTS VM Support Zero touch install Copy and Paste 2 Channel Audio GPU Acceleration via...

authentik version/2026.8.2

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

KLA91278 PE vulnerability in Microsoft Azure

Privilege escalation vulnerability was found in Microsoft Products Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-57104 Exploitation Related products Microsoft-Azure CVE list CVE-2026-57104 critical Solution Install necessary...

CVE-2026-80378

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an improper authorization flaw that a remote authenticated attacker can exploit to cause a denial of service . The CVSS 3.1 score is 8.5 (HIGH) , with a changed scope, low integrity impact, and high availability impact. The CVE title references...

CVE-2026-80380

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by cross-site request forgery (CSRF) , allowing a remote attacker with no privileges but requiring user interaction to perform unauthorized actions. The flaw is attributed to open source software components within the product, as indicated b...

CVE-2026-80434 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object reference...

CVE-2026-81554 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82092 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82095 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...