-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +16022 more potentially affected by CVE-2026-42034 via axios (>=1.0.0, <=1.15.0)

axios NPM version =1.0.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.18 and more Source cves: CVE-2026-42034 Source advisory: SNYK:JS-AXIOS-16298130...

-fides-amor-et-lux (1.0.0), 0xpay-cc-sdk (>=0.0.8, <=0.1.0) +14903 more potentially affected by CVE-2026-42037 via axios (>=1.3.0, <=1.15.0)

axios NPM version =1.3.0, =0.0.8, =1.0.54, =0.1.0, =1.0.1, =1.0.0, =0.0.1, =0.0.1, =0.1.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0, =2.0.200 and more Source cves: CVE-2026-42037 Source advisory: SNYK:JS-AXIOS-16299819...

@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +158 more potentially affected by CVE-2026-41311 via liquidjs (>=10.2.0, <=10.25.6)

liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =0.5.5, =0.8.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =3.20.0-rc1 and more Source cves: CVE-2026-41311 Source advisory: OSV:GHSA-4RC3-7J7W-M548...

lemmy_api (>=0.11.3-rc.5, <=0.18.0), lemmy_api_crud (>=0.11.3-rc.5, <=0.18.0) +5 more potentially affected by CVE-2026-42181 via lemmy_api_common (>=0.11.3-rc.5, <=0.18.0-rc.8)

lemmyapicommon CARGO version =0.11.3-rc.5, =0.11.3-rc.5, =0.11.3-rc.5, =0.11.3-rc.5, =0.11.3-rc.5, =0.11.3-rc.5, =0.11.3-rc.5, =0.11.3-rc.5, =0.16.7 Source cves: CVE-2026-42181 Source advisory: OSV:GHSA-H6HF-9846-XWRQ...

CVE-2026-40176 vulnerabilities

Vulnerabilities for packages: composer...

RHSA-2026:7578 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:5979 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:10118 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41358 via openclaw (>=2026.3.22, <=2026.4.1)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41358 Source advisory: SNYK:JS-OPENCLAW-16206250...

GHSA-XHJ4-VRGC-HR34 vulnerabilities

Vulnerabilities for packages: parseable, qdrant...

Linux Distros Unpatched Vulnerability : CVE-2026-31567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PM: sleep: Drop spurious WARNON from pmrestoregfpmask Commit 35e4a69b2003f PM: sleep: Allow pmrestrictgfpmask stacking introduced refcount-based GFP mask...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0831

Updates of 'erlang' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-0831

Updates of 'erlang' packages of Photon OS have been released...

Oracle Linux 7 : libpng12 (ELSA-2026-7032)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-7032 advisory. 1.2.50-10.0.1 - Fix CVE-2026-25646: heap buffer overflow in pngsetquantize Orabug: 39183864 Tenable has extracted the preceding description block directly from...

GHSA-J88V-2CHJ-QFWX vulnerabilities

Vulnerabilities for packages: dapr, azure-service-operator, temporal, kine, ferretdb, sftpgo-plugin-eventsearch, sftpgo-plugin-eventstore, seaweedfs, argo-workflows, pgtimetable, sqlexporter, migrate, sftpgo, src, step-issuer, splunk-otel-collector, step-ca, kubeflow-pipelines,...

GHSA-HPPC-G8H3-XHP3 vulnerabilities

Vulnerabilities for packages: rustls-openssl-client, deno, sqlx, guestproxyagent, sccache, ztunnel-fips, rpm-sequoia, bootc, komodo, rustup, valkey-ldap, vector, typst, sdp-k8s-injector, sentry-cli...

EUVD-2026-25234

hackage-server lacked Cross-Site Request Forgery CSRF protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to upload packages or perform other administrative actions. Some unauthenticated actions could also be abus...

EUVD-2026-25224

SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is not sanitized before being incorporated into a SQL query. An unauthenticated remote attacker can exploit this...

CVE-2026-40471

hackage-server lacked Cross-Site Request Forgery CSRF protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to upload packages or perform other administrative actions. Some unauthenticated actions could also be abus...

CVE-2026-41460

SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is not sanitized before being incorporated into a SQL query. An unauthenticated remote attacker can exploit this...