CVE-2026-40176 vulnerabilities

Vulnerabilities for packages: composer...

RHSA-2026:7578 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:5979 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:10118 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41358 via openclaw (>=2026.3.22, <=2026.4.1)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider 0.1.1 Source cves: CVE-2026-41358 Source advisory: SNYK:JS-OPENCLAW-16206250...

GHSA-XHJ4-VRGC-HR34 vulnerabilities

Vulnerabilities for packages: qdrant, parseable...

Critical Photon OS Security Update - PHSA-2026-5.0-0831

Updates of 'erlang' packages of Photon OS have been released...

Oracle Linux 7 : libpng12 (ELSA-2026-7032)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-7032 advisory. 1.2.50-10.0.1 - Fix CVE-2026-25646: heap buffer overflow in pngsetquantize Orabug: 39183864 Tenable has extracted the preceding description block directly from...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0831

Updates of 'erlang' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-31567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PM: sleep: Drop spurious WARNON from pmrestoregfpmask Commit 35e4a69b2003f PM: sleep: Allow pmrestrictgfpmask stacking introduced refcount-based GFP mask...

GHSA-J88V-2CHJ-QFWX vulnerabilities

Vulnerabilities for packages: src, step-ca, spicedb, bento, ferretdb, flyte, caddy, gitlab-kas, dapr, juicefs, k3s, sftpgo, step-issuer, timescaledb-parallel-copy, sftpgo-plugin-eventsearch, cloudnative-pg, gitaly, steampipe, kots, hydra, cloudprober, keda, temporal-server, seaweedfs,...

GHSA-HPPC-G8H3-XHP3 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, deno, guestproxyagent, sentry-cli, rustup, typst, valkey-ldap, bootc, sqlx, rustls-openssl-client, sdp-k8s-injector, rpm-sequoia, vector, sccache, komodo...

EUVD-2026-25224

SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is not sanitized before being incorporated into a SQL query. An unauthenticated remote attacker can exploit this...

EUVD-2026-25234

hackage-server lacked Cross-Site Request Forgery CSRF protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to upload packages or perform other administrative actions. Some unauthenticated actions could also be abus...

CVE-2026-40471

hackage-server lacked Cross-Site Request Forgery CSRF protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to upload packages or perform other administrative actions. Some unauthenticated actions could also be abus...

CVE-2026-41460

SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text parameter is not sanitized before being incorporated into a SQL query. An unauthenticated remote attacker can exploit this...

companies.sh (>=2026.324.0-canary.0, <=2026.325.0-canary.3), corporateai (2026.328.0-canary.0) +3 more potentially affected by CVE-2026-41208 via @paperclipai/server (>=2026.3.17-canary.3, <=2026.415.0-canary.7)

@paperclipai/server NPM version =2026.3.17-canary.3, =2026.324.0-canary.0, =2026.3.17-canary.3, =0.6.5, =0.6.6 Source cves: CVE-2026-41208 Source advisory: SNYK:JS-PAPERCLIPAISERVER-16323184...

CVE-2026-40471

CVE-2026-40471 affects the Hackage hackage-server where CSRF protection was lacking across endpoints. This could allow forged requests from scripts on foreign sites to abuse latent credentials, potentially uploading packages or performing administrative actions, with some unauthenticated actions ...

CVE-2026-40471 Hackage CSRF vulnerability

hackage-server lacked Cross-Site Request Forgery CSRF protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to upload packages or perform other administrative actions. Some unauthenticated actions could also be abus...

CVE-2026-40471

hackage-server lacked Cross-Site Request Forgery CSRF protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to upload packages or perform other administrative actions. Some unauthenticated actions could also be abus...