Important Photon OS Security Update - PHSA-2026-5.0-91-0729

Updates of 'python3' packages of Photon OS have been released...

@regis-samurai/n8n (>=0.216.1, <=0.219.1), n8n-nodes-accelo (>=0.1.0, <=0.1.9) +8 more potentially affected by CVE-2026-21877 via n8n (>=0.138.0, <=0.219.1)

n8n NPM version =0.138.0, =0.216.1, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.1.7 Source cves: CVE-2026-21877 Source advisory: OSV:GHSA-V364-RW7M-3263...

@imagina/n8n-nodes-iwhatsapp (>=0.1.0, <=0.2.7), @regis-samurai/n8n (>=0.216.1, <=0.219.1) +15 more potentially affected by CVE-2026-21877 via n8n-nodes-base (>=0.123.1, <=0.225.0)

n8n-nodes-base NPM version =0.123.1, =0.1.0, =0.216.1, =0.126.0, =0.1.0, =0.18.0, =0.1.0, =1.0.0, =0.1.0, =0.2.14, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-21877 Source advisory: SNYK:JS-N8NNODESBASE-14894272...

VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

Popular artificial intelligence AI-powered Microsoft Visual Studio Code VS Code forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are non-existent in the Open VSX registry, potentially opening the door to supply chain risks when bad actors...

GHSA-399H-RRQC-RPGV vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-13837 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-13836 vulnerabilities

Vulnerabilities for packages: python...

GHSA-QHX6-HPFJ-8M4G vulnerabilities

Vulnerabilities for packages: python...

GHSA-399H-RRQC-RPGV vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-13836 vulnerabilities

Vulnerabilities for packages: python...

acme-compilers (>=0.2.2, <=0.2.4), acvm (>=0.23.0, <=0.26.1) +297 more potentially affected by unknown CVE via rkyv (>=0.1.1, <=0.7.45)

rkyv CARGO version =0.1.1, =0.2.2, =0.23.0, =0.23.0, =0.0.1, =0.2.0, =0.39.0, =0.23.0, =0.26.1 - cairn-import-geonames 0.0.2-alpha - cairn-import-oa 0.0.2-alpha - cairn-import-osm 0.0.2-alpha - cairn-import-wof 0.0.2-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0001...

Linux Distros Unpatched Vulnerability : CVE-2025-11964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes,...

MGASA-2026-0001 Updated cups packages fix bug & security vulnerabilities

cups has Authentication bypass with AuthType Negotiate. CVE-2025-58060 cups: Remote DoS via null dereference. CVE-2025-58364...

CVE-2026-21437

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

EUVD-2025-206137

Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package...

Important Photon OS Security Update - PHSA-2026-4.0-0937

Updates of 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0725

Updates of 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-0725

Updates of 'linux' packages of Photon OS have been released...

CVE-2025-68619

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore interface allow administrators to install npm packages through a REST API endpoint. While the endpoint validates that the package name exists in the npm registry as a known plugi...

CVE-2025-68619

CVE-2025-68619 affects the Signal K Server. The appstore REST endpoint allows admins to install npm packages by passing a version specifier, but the code does not sanitize this field and forwards it to npm. Because npm supports arbitrary version specifiers (including URLs and git sources) the att...