CVE-2026-23870

CVE-2026-23870 is a denial-of-service vulnerability in react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. It affects versions 19.0.0–19.0.5, 19.1.0–19.1.6, and 19.2.0–19.2.5. Triggered by specially crafted HTTP requests to server function endpoints, it can cause se...

GHSA-P4R4-XVRQ-GVMC vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-41491 vulnerabilities

Vulnerabilities for packages: dapr...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, seaweedfs, timescaledb-parallel-copy, gitlab-kas, spire-server, step-ca, trillian, sftpgo, sftpgo-plugin-eventstore, ferretdb, step-issuer, telegraf, openfga, falcosidekick, cloudnative-pg, migrate, bento, azure-service-operator, spqr, k3s, kuma,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, src-fingerprint, kubevela, melange, gptscript, pulumi-language-dotnet, gomplate, flux, flux-source-controller, kaniko, guac, skaffold, kubescape, zarf, kargo, k9s, osv-scanner, trufflehog, wolfictl, pulumi, nuclei, syft, grype, gitsign, apk...

OceanLotus suspected of using PyPI to deliver ZiChatBot malware

Introduction Through our daily threat hunting, we noticed that, beginning in July 2025, a series of malicious wheel packages were uploaded to PyPI the Python Package Index. We shared this information with the public security community, and the malware was removed from the repository. We submitted...

RHSA-2026:8291 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:13722 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:13719 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2025-54502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect use of boot service in the AMD Platform Configuration Blob APCB SMM driver could allow a privileged attacker with local access Ring 0 to achieve...

Linux Distros Unpatched Vulnerability : CVE-2026-43194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: consume xmit errors of GSO frames udpgrofrglist.sh and udpgrobench.sh are the flakiest tests currently in NIPA. They fail in the same exact way, TCP GRO te...

Linux Distros Unpatched Vulnerability : CVE-2026-43132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later...

Linux Distros Unpatched Vulnerability : CVE-2026-43103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lapbether: handle NETDEVPRETYPECHANGE lapbethdatatransmit expects the underlying device type to be ARPHRDETHER. Returning NOTIFYBAD from lapbethdeviceevent...

Linux Distros Unpatched Vulnerability : CVE-2026-43083

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ioam6: fix OOB and missing lock When trace-type.bit6 is set: if trace-type.bit6 ... queue = skbgettxqueuedev, skb %NASLMINLEVEL 80900 C Tenable, Inc...

Moderate Photon OS Security Update - PHSA-2026-4.0-1011

Updates of 'mysql' packages of Photon OS have been released...

PT-2026-37660

Name of the Vulnerable Software and Affected Versions react-server-dom-webpack versions 19.0.0 through 19.0.5 react-server-dom-webpack versions 19.1.0 through 19.1.6 react-server-dom-webpack versions 19.2.0 through 19.2.5 react-server-dom-parcel versions 19.0.0 through 19.0.5...

Linux Distros Unpatched Vulnerability : CVE-2026-43242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: ti: k3-socinfo: Fix regmap leak on probe failure The mmio regmap allocated during probe is never freed. Switch to using the device managed allocator so tha...

Linux Distros Unpatched Vulnerability : CVE-2026-43080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - l2tp: Drop large packets with UDP encap syzbot reported a WARN on my patch series 1. The actual issue is an overflow of 16-bit UDP length field, and it exists i...

Linux Distros Unpatched Vulnerability : CVE-2026-43257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cx88: Add missing unmap in sndcx88hwparams In error path, add cx88alsadmaunmap to release resource acquired by cx88alsadmamap. CVE-2026-43257 Note that...

Oracle Linux 10 : osbuild-composer (ELSA-2026-13643)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-13643 advisory. - Ensure build on latest golang: CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...