196376 matches found
CVE-2026-59278 In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages
JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the...
CLSA-2026-1787795582 TuxCare security update for @nestjs (2 CVEs)
TuxCare rebuilt 9 @nestjs packages to address 2 CVEs. Fixed in 10.4.22-tuxcare.1...
CVE-2026-81098: Missing Authentication for Critical Function
The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...
PT-2026-82417
Name of the Vulnerable Software and Affected Versions Spring for Apache Kafka version 4.1.0 Spring for Apache Kafka versions 4.0.0 through 4.0.6 Spring for Apache Kafka versions 3.0.0 through 3.3.16 Spring for Apache Kafka versions 2.9.0 through 2.9.14 Spring for Apache Kafka versions 2.8.12 and...
GO-2026-6255 vulnerabilities
Vulnerabilities for packages: conftest-fips, zot, docker-fips, guac, conftest, kaniko, scorecard, kubescape-server, skaffold, trivy-fips, kubescape, trivy, kaniko-fips, podman, livekit-cli, skaffold-fips, cloudbeat-fips, cloudbeat, kubescape-server-fips, trivy-operator-fips, podman-fips...
GO-2026-6256 vulnerabilities
Vulnerabilities for packages: conftest-fips, zot, docker-fips, guac, conftest, kaniko, scorecard, kubescape-server, skaffold, trivy-fips, kubescape, trivy, kaniko-fips, podman, livekit-cli, skaffold-fips, cloudbeat-fips, cloudbeat, kubescape-server-fips, trivy-operator-fips, podman-fips...
CVE-2026-55677 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter-fips, kube-metrics-adapter, listmonk, temporal, falcosidekick-ui, temporal-ui-server-fips, falcosidekick-ui-fips, temporal-ui-server, temporal-fips...
CLSA-2026-1787750951 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 2 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.4...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +1066 more potentially affected by unknown CVE via next (>=16.0.0, <=16.3.2)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: unknown CVE Source advisory:...
RHSA-2026:57456 Red Hat Security Advisory: OpenShift Container Platform 4.21.30 packages and security update
Bulletin has no description...
RHSA-2026:57361 Red Hat Security Advisory: OpenShift Container Platform 4.22.11 packages and security update
Bulletin has no description...
GHSA-CRPM-PXR9-5JCF vulnerabilities
Vulnerabilities for packages: firefox...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.2.hum1 aarch64, x8664 glibc-2.43-8.2.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.2.hum1 aarch64, x8664 glibc-benchtests-2.43-8.2.hum1 aarch64, x8664...
RLSA-2026:22121 Important: golang security update
The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum validation flaw via malicious module proxy...
ALSA-2026:60305 Important: go-toolset:rhel8 security, bug fix, and enhancement update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of Service from quadrati...
Moderate: attr security update
The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fixes: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 For more details about...
Fedora 44 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-77528477c2)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-77528477c2 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...
RHCOS 4 : OpenShift Container Platform 4.15.68 (RHSA-2026:56910)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56910 advisory. - crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2025-68121 - net/url: Incorrect parsin...
GHSA-G352-92JC-35RP vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-W67G-5RQW-F597 vulnerabilities
Vulnerabilities for packages: redis-operator, aws-node-termination-handler, gpu-operator-fips, eks-distro-fips, virt-handler, redis-operator-fips, guac, emissary, virt-api-fips, eks-distro, etcd-fips, amazon-ssm-agent-fips, cilium-fips, loki-fips, virt-controller-fips, cluster-api-fips,...