Updated erlang packages fix a security vulnerability

The updated packages fix a security vulnerability: SFTP READLINK response leaks absolute backend filesystem path when root is configured. CVE-2026-48855...

Linux Distros Unpatched Vulnerability : CVE-2026-63855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vcn: set nouserfence for VCN v2.5 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with use...

Linux Distros Unpatched Vulnerability : CVE-2026-63846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/jpeg: set nouserfence for JPEG v3.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked fr...

Linux Distros Unpatched Vulnerability : CVE-2026-63848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/jpeg: set nouserfence for JPEG v2.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked fr...

Linux Distros Unpatched Vulnerability : CVE-2026-63810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not...

Linux Distros Unpatched Vulnerability : CVE-2026-63831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform...

Linux Distros Unpatched Vulnerability : CVE-2026-53392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the filehandle- version array count from the flexfiles layout body. The value is...

@agentspec/claude-plugin (>=0.1.0, <=0.2.0), @agentspec/sidecar (0.1.0) +85 more potentially affected by CVE-2026-16158 via @fastify/reply-from (>=8.3.1, <=11.0.2)

@fastify/reply-from NPM version =8.3.1, =0.1.0, =0.0.2, =1.0.0, =1.0.19, =2.1.22, =0.1.1, =0.1.0, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =1.0.0, =1.0.1 and more Source cves: CVE-2026-16158 Source advisory: SNYK:JS-FASTIFYREPLYFROM-18016324...

Malicious Package

Overview zztest17785553774 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview zzpdfvar06 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview zwagbdr is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Linux Distros Unpatched Vulnerability : CVE-2026-50646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. CVE-2026-50646 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2026-54464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact If this library is used in tandem with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than...

Oracle Linux 8 : hplip (ELSA-2026-40894)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-40894 advisory. 3.18.4-14 - RHEL-192009 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 Tenable has extracted the preceding description block directly from the Oracle...

Linux Distros Unpatched Vulnerability : CVE-2026-50650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally. CVE-2026-50650 Note tha...

CVE-2026-57432 vulnerabilities

Vulnerabilities for packages: perl...

CVE-2026-15768 vulnerabilities

Vulnerabilities for packages: chromium...

@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +23 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)

exifreader NPM version =4.1.1, =0.0.5, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 - @scopieflows/app-image-helper 0.1.12 and more Source cves: CVE-2026-53496 Source advisory: OSV:GHSA-G77H-45RF-HCX4...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxslt: libxslt-1.1.45-0.1.1.hum1 aarch64, x8664 libxslt-devel-1.1.45-0.1.1.hum1 aarch64, x8664 python3-libxslt-1.1.45-0.1.1.hum1 aarch64, x8664 libxslt-1.1.45-0.1.1.hum1.src src...

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil , which was observed using...