194982 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-7990
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege...
Linux Distros Unpatched Vulnerability : CVE-2026-7931
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-7932
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass navigation restrictions via a crafted HT...
Linux Distros Unpatched Vulnerability : CVE-2026-43221
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: ipmb: initialise event handler read bytes IPMB doesn't use i2c reads, but the handler needs to set a value. Otherwise an i2c read will return an...
Malicious code in camelotlabs-worker (npm)
Five packages camelotlabs-sdk, camelotlabs-core, camelotlabs-config, camelotlabs-worker, and camelotlabs-utils were published to the public npm registry at version 99.0.0 by the actor madman0619 as a dependency confusion attack targeting the internal npm packages of Camelot Labs. The inflated...
@3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5), @a0dotrun/expose (>=0.0.2, <=0.0.4) +562 more potentially affected by CVE-2026-44456 via hono (>=4.0.0, <=4.12.15)
hono NPM version =4.0.0, =0.1.8-fix.3, =0.0.2, =0.3.1, =0.9.0, =0.1.0, =0.1.9, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.1, =2026.4.4, =1.0.2, =1.9.1 and more Source cves: CVE-2026-44456 Source advisory: SNYK:JS-HONO-16438966...
@datalayer/jupyter-react (>=0.0.6, <=0.9.5), @jupyter-notebook/lab-extension (>=7.1.0-rc.1, <=7.4.7) +9 more potentially affected by CVE-2026-42557 via @jupyterlab/notebook (>=4.0.0, <=4.5.1)
@jupyterlab/notebook NPM version =4.0.0, =0.0.6, =7.1.0-rc.1, =7.1.0-rc.1, =0.0.23, =5.3.6, =1.0.0, =1.4.0 Source cves: CVE-2026-42557 Source advisory: SNYK:JS-JUPYTERLABNOTEBOOK-16438957...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: valkey: valkey-9.0.4-0.1.hum1 aarch64, x8664 valkey-compat-redis-9.0.4-0.1.hum1 noarch valkey-compat-redis-devel-9.0.4-0.1.hum1 noarch valkey-devel-9.0.4-0.1.hum1 aarch64, x8664...
GHSA-VF2M-468P-8V99 vulnerabilities
Vulnerabilities for packages: arangodb, lerna, langfuse, langfuse-fips, gitlab-rails-ce-fips, kibana, kubeflow-centraldashboard, opensearch-dashboards, awx, nextcloud-server, gitlab-rails-ce, saf, wazuh-dashboard-fips, wazuh-dashboard, kubeflow-katib, jitsucom-jitsu, opensearch-dashboards-fips,...
MGASA-2026-0109 Updated virtualbox packages fix security vulnerabilities
Some security vulnerabilities are fixed by this update; please see the links. If you will not update to kernel 6.6.137 flavors, please think in use dkms-virtualbox package instead of virtualbox-kernel as those packages have not been updated for previous kernels...
CVE-2026-23870
A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel,...
CVE-2026-23870
A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel,...
CVE-2026-23870
CVE-2026-23870 is a denial-of-service vulnerability in react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. It affects versions 19.0.0–19.0.5, 19.1.0–19.1.6, and 19.2.0–19.2.5. Triggered by specially crafted HTTP requests to server function endpoints, it can cause se...
GHSA-P4R4-XVRQ-GVMC vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-41491 vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-41889 vulnerabilities
Vulnerabilities for packages: trillian, bento, hydra, spire-server, azure-service-operator, cerbos, migrate, k3s, gitlab-kas, caddy, openbao, opentelemetry-collector-contrib, telegraf, falcosidekick, kine, envoy-gateway, temporal, grafana, pgtimetable, kube-bench, jitsucom-bulker, kots,...
CVE-2026-41506 vulnerabilities
Vulnerabilities for packages: dagger, trufflehog, kyverno, teleport, flux, goreleaser, pulumi-language-java, cerbos, kargo, k9s, act, kubescape, xeol, skaffold, external-secrets-operator, nuclei, trivy-operator, guac, argocd-image-updater, bom, gptscript, kubevela, melange, snyk-cli, zot, gitsign...
OceanLotus suspected of using PyPI to deliver ZiChatBot malware
Introduction Through our daily threat hunting, we noticed that, beginning in July 2025, a series of malicious wheel packages were uploaded to PyPI the Python Package Index. We shared this information with the public security community, and the malware was removed from the repository. We submitted...