PT-2026-100826

ghsa-hmw2-7cc7-3qxx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102250

ghsa-p998-jp59-783m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101847

ghsa-47q9-m4ww-924m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100877

ghsa-qqpg-mvqg-649v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100849

ghsa-jjhc-v7c2-5hh6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100803

ghsa-jpcw-4wr7-c3vq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100141

ghsa-389x-839f-4rhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100121

ghsa-5239-wwwm-4pmq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100419

ghsa-pwhc-rpq9-4c8w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100516

ghsa-3wq7-rqq7-wx6j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100400

ghsa-9ppj-qmqm-q256 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100508

ghsa-hgf8-39gv-g3f2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101482

ghsa-v92g-xgxw-vvmm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLSA-2026-1789677164 TuxCare security update for 32 packages (16 CVEs)

TuxCare rebuilt 32 packages to address 16 CVEs. Fixed in 7.0.70-tuxcare.4...

CVE-2026-54253 TS3 Manager: Reflected XSS via /api/download port parameter steals operator session

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/download handler in packages/server/routes/api.js passes the attacker-controlled port query parameter to socket.connectport, host and returns the resulting error.message through...

CLEANSTART-2026-AA21675 Security fix for CVE-2026-54516 applied in: activemq 6.1.8-r1, activemq 6.2.8-r1, activemq 6.3.1-r1, apache-nifi 2.10.0-r3, apache-nifi 2.9.0-r5, apache-nifi-registry 2.9.0-r3, confluent-kafka 8.3.0-r1, elasticsearch 9.4.4-r4, hazelcast 5.7.0-r1, kafka 4.3.1-r1, logstash-fips 9.4.3-r1, rundeck 6.0.0-r2, rundeck 6.0.1-r0, sonarqube 26.3.0.120487-r4, strimzi-kafka-operator 1.1.0-r1, trino 480-r7

CVE-2026-54516 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-92951

vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check that uses non-exact substring matching instead of full package-name boundary validation. Attackers can bypass the allowlist by requiring a colliding package name that contains an allowliste...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 packages and security update

Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

CVE-2026-54339: Server-Side Request Forgery (SSRF)

Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feedurl to discoverfeedfeedurl, creates a subscription through FeedService.createsubscription, and enqueues fetchfeedtask. The background path calls...

CVE-2026-54253: Improper Neutralization of Input During Web Page Generation

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/download handler in packages/server/routes/api.js passes the attacker-controlled port query parameter to socket.connectport, host and returns the resulting error.message through...