PT-2026-83579

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.1 Description A stored cross-site scripting issue exists in the confirmDialog function. This occurs because unescaped package names and notebook names are interpolated directly into innerHTML assignments. An attack...

CVE-2026-9496 vulnerabilities

Vulnerabilities for packages: graalvm, prism, lerna...

Linux Distros Unpatched Vulnerability : CVE-2026-40205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the...

CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: apache-pulsar, druid, tez...

GHSA-MCJ4-MPHF-J9FF vulnerabilities

Vulnerabilities for packages: cloudbeat...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: falcosidekick-ui, falcosidekick-ui-fips, kube-metrics-adapter, temporal-ui-server, kube-metrics-adapter-fips, temporal-fips, listmonk, temporal-ui-server-fips, temporal...

CLSA-2026-1787835578 TuxCare security update for 3 packages (2 CVEs)

TuxCare rebuilt 3 packages to address 2 CVEs. Fixed in 15.11.7-tuxcare.1...

golang security, bug fix, and enhancement update

An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RHSA-2026:59641 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:59635 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:57482 Red Hat Security Advisory: OpenShift Container Platform 4.18.54 packages and security update

Bulletin has no description...

RHSA-2026:56785 Red Hat Security Advisory: OpenShift Container Platform 4.14.72 packages and security update

Bulletin has no description...

GO-2026-6256 vulnerabilities

Vulnerabilities for packages: cloudbeat, podman, zot, kubescape-server-fips, kubescape-server, kubescape, docker-fips, skaffold-fips, livekit-cli, guac, skaffold, kaniko, kaniko-fips, trivy-operator-fips, conftest, scorecard, podman-fips, cloudbeat-fips, trivy-fips, trivy, conftest-fips...

GO-2026-6255 vulnerabilities

Vulnerabilities for packages: cloudbeat, podman, zot, kubescape-server-fips, kubescape-server, kubescape, docker-fips, skaffold-fips, livekit-cli, guac, skaffold, kaniko, kaniko-fips, trivy-operator-fips, conftest, scorecard, podman-fips, cloudbeat-fips, trivy-fips, trivy, conftest-fips...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: falcosidekick-ui, falcosidekick-ui-fips, kube-metrics-adapter, temporal-ui-server, kube-metrics-adapter-fips, temporal-fips, listmonk, temporal-ui-server-fips, temporal...

RHSA-2026:57456 Red Hat Security Advisory: OpenShift Container Platform 4.21.30 packages and security update

Bulletin has no description...

RHSA-2026:57361 Red Hat Security Advisory: OpenShift Container Platform 4.22.11 packages and security update

Bulletin has no description...

GHSA-CRPM-PXR9-5JCF vulnerabilities

Vulnerabilities for packages: firefox...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.2.hum1 aarch64, x8664 glibc-2.43-8.2.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.2.hum1 aarch64, x8664 glibc-benchtests-2.43-8.2.hum1 aarch64, x8664...

RLSA-2026:22121 Important: golang security update

The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum validation flaw via malicious module proxy...