196276 matches found
MGASA-2026-0294 Updated libevent packages fix security vulnerabilities
The updated packages fix some security vulnerabilities...
RHSA-2026:1540 Red Hat Security Advisory: OpenShift Container Platform 4.15.61 packages and security update
Bulletin has no description...
GHSA-F4V5-65JJ-PCR2 vulnerabilities
Vulnerabilities for packages: spark, solr, confluent-kafka-jre-bcfips, apache-jena-fuseki, kafka-fips, apache-hop-fips, druid, neo4j, dependency-track, spark-kubernetes-operator, spark-kubernetes-operator-fips, traccar-fips, traccar, apache-hop, spark-fips, trino, confluent-kafka,...
CVE-2026-10051 vulnerabilities
Vulnerabilities for packages: spark, solr, confluent-kafka-jre-bcfips, apache-jena-fuseki, kafka-fips, apache-hop-fips, druid, neo4j, dependency-track, spark-kubernetes-operator, spark-kubernetes-operator-fips, traccar-fips, traccar, apache-hop, spark-fips, trino, confluent-kafka,...
Debian dla-4696 : imagemagick - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4696 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4696-1 [email protected]...
Photon OS 5.0: Nasm PHSA-2026-5.0-0925
An update of the nasm package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0925. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Critical Photon OS Security Update - PHSA-2026-5.0-0929
Updates of 'libmicrohttpd', 'rubygem-concurrent-ruby' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2026-5.0-90-0929
Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...
CVE-2026-16796
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...
CVE-2026-16796 Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...
CVE-2026-16796
The vulnerability CVE-2026-16796 affects the AWS Bedrock AgentCore Python SDK install_packages() function; due to improper neutralization of argument delimiters, a remote authenticated user could execute arbitrary commands within the Code Interpreter sandbox when using SDK versions before 1.18.1....
CVE-2026-16796 Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...
The case for a cooldown: Why Dependabot now waits before issuing version updates
In September 2025, an attacker phished the credentials of a single npm maintainer and published booby-trapped versions of chalk, debug, and around a dozen other packages that are together downloaded more than 2 billion times a week. The code rewrote cryptocurrency wallet addresses inside any...
@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +54 more potentially affected by CVE-2026-73419 via next-auth (>=4.0.0-beta.6, <=4.24.13)
next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =5.1.0 and more Source cves: CVE-2026-73419 Source advisory: OSV:GHSA-X445-F3H2-J279...
CVE-2026-61943
Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager WHM instances. The activity involves malicious Packagist development versions spanning 10 packag...
CVE-2026-61948 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-61948 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-61948
WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...
