com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2026-13506 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)

org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-13506 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519021...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21490 more potentially affected by CVE-2026-59639 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-59639 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18513024...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21490 more potentially affected by CVE-2026-59647 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-59647 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18513012...

cn.ponfee:commons-core (1.0), com.alipay.chainstack:chainstack-mychain-drc (2.0.1-rc) +120 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-jdk15on (>=1.57, <=1.70)

org.bouncycastle:bctls-jdk15on MAVEN version =1.57, =2.0.0-rc, =2.0.0-rc, =2.0.0-rc, =0.10.2.24.5, =1.0, =1.0, =2.0, =2.12, =4.1 and more Source cves: CVE-2026-59646 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512882...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-59650 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-59650 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512817...

Linux Distros Unpatched Vulnerability : CVE-2026-61372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0938

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-8763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before...

frr10 security, bug fix, and enhancement update

10.4.3-3.2 - Resolves: RHEL-222338 - AVC when reading user's site-packages 10.4.3-3.1 - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232...

frr security, bug fix, and enhancement update

8.5.3-15.1 - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing 8.5.3-15 - Resolves: RHEL-176258 - AVC when reading user's site-packages 8.5.3-14 - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface...

Critical Photon OS Security Update - PHSA-2026-5.0-0938

Updates of 'linux-esx', 'linux' packages of Photon OS have been released...

Virtuozzo Infrastructure 7.4 Hotfix 1 (7.4.0-75)

This update provides stability fixes. Vulnerability id: VSTOR-102068, VSTOR-102069, VSTOR-138302 Creating a VM in a server group could fail with "No valid host found" because a previously canceled or failed VM remained in the server group. Vulnerability id: VSTOR-120923 VPN could stop working whe...

PT-2026-67013

Name of the Vulnerable Software and Affected Versions nltk version 3.9.4 Description The nltk.downloader.Downloader. download package function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with t...

Linux Distros Unpatched Vulnerability : CVE-2026-14682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite- length read. This issue also affects Bouncy Castle for Jav...

Linux Distros Unpatched Vulnerability : CVE-2026-59650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before...

Linux Distros Unpatched Vulnerability : CVE-2026-58060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java...

MiracleLinux 9 : nginx:1.24 (AXSA:2026-1411:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1411:01 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...

RockyLinux 8 : libtiff (RLSA-2026:47184)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47184 advisory. libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 Tenable has extracted the preceding description block...

pkgxray v1.0.5

pkgxray — pre-install security for npm packages, MCP servers, and AI agents Inspect an npm package or MCP server before you install or connect to it, and get a deterministic, evidence-backed SAFE, REVIEW, or BLOCK verdict. Local, zero-dependency static analysis — normal scans never execute packag...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.4.hum1 aarch64, x8664 grafana13.1-13.1.1-0.4.hum1.src src Security Fixes: grafana13.1: CVE-2026-18446...