CVE-2026-90651

Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...

CVE-2026-90651

Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...

CLSA-2026-1789220666 TuxCare security update for 40 packages (2 CVEs)

TuxCare rebuilt 40 packages to address 2 CVEs. Fixed in 10.1.42-tuxcare.10...

Malicious code in id79-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

CLSA-2026-1789219285 TuxCare security update for 123 packages (4 CVEs)

TuxCare rebuilt 123 packages to address 4 CVEs. Fixed in 11.0.32.tuxcare0001...

CVE-2026-84380 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-13.0, py3-httpx2...

CVE-2026-84382 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-13.0, py3-httpx2...

CVE-2026-84379 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-13.0, py3-httpx2...

GHSA-8XX6-HGC6-GC2M vulnerabilities

Vulnerabilities for packages: lmcache-cuda-13.0, py3-httpx2...

GHSA-PF96-P4FJ-6566 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-13.0, py3-httpx2...

CVE-2026-84363 vulnerabilities

Vulnerabilities for packages: librechat, kibana, wazuh-dashboard, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

GHSA-G6GW-C38X-MQFC vulnerabilities

Vulnerabilities for packages: librechat, kibana, wazuh-dashboard, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

CVE-2026-84364 vulnerabilities

Vulnerabilities for packages: librechat, kibana, wazuh-dashboard, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

CVE-2026-82209 vulnerabilities

Vulnerabilities for packages: curl, eco-python-curl...

GHSA-PF96-P4FJ-6566 vulnerabilities

Vulnerabilities for packages: py3-httpx2...

[SECURITY] Fedora 43 Update: bluez-5.87+1.git8750129efca8-1.fc43

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

[SECURITY] Fedora 45 Update: bluez-5.87+1.git8750129efca8-1.fc45

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

PT-2026-90937

These are all security issues fixed in the syncthing-2.1.5-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-90933

These are all security issues fixed in the coreutils-9.11-5.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-90932

These are all security issues fixed in the ant-1.10.18-1.1 package on the GA media of openSUSE Tumbleweed...