Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gnutls: gnutls-3.8.12-1.1.hum1 aarch64, x8664 gnutls-c++-3.8.12-1.1.hum1 aarch64, x8664 gnutls-dane-3.8.12-1.1.hum1 aarch64, x8664 gnutls-devel-3.8.12-1.1.hum1 aarch64, x8664...

REDAXO has reflected XSS backend packages API via function parameter (CSRF token required)

Summary A reflected XSS vulnerability has been identified in the REDAXO backend. The function parameter is concatenated into an API error message and rendered without HTML escaping. --- Details Root cause User input function is injected into an exception message, then rendered by rexview::error...

@alexaegis/svelte-config (>=0.9.2, <=0.15.0), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +17 more potentially affected by CVE-2026-40073 via @sveltejs/kit (>=2.0.0, <=2.55.0)

@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =0.4.1, =5.0.0-alpha.1, =0.0.1, =1.0.1-next.0, =0.0.10, =1.0.54 and more Source cves: CVE-2026-40073 Source advisory: OSV:GHSA-2CRG-3P73-43XP...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-23869 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...

CVE-2025-13462 vulnerabilities

Vulnerabilities for packages: python...

GHSA-43RW-359F-4H89 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-3479 vulnerabilities

Vulnerabilities for packages: python...

GHSA-9QPV-486P-2V4H vulnerabilities

Vulnerabilities for packages: python...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs:...

GHSA-P9FF-H696-F583 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, gitlab-rails-ce-fips, vite, gitlab-rails-ce, vitess...

CVE-2025-55674 vulnerabilities

Vulnerabilities for packages: superset...

GHSA-43RW-359F-4H89 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-3479 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-39958 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-azure, linux-vmware, linux-qemu...

RockyLinux 10 : git-lfs (RLSA-2026:7005)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:7005 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the RockyLinux...

Important Photon OS Security Update - PHSA-2026-5.0-0815

Updates of 'libtiff', 'sudo', 'mysql' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-0814

Updates of 'nodejs' packages of Photon OS have been released...

openSUSE 16 Security Update : cockpit-packages (openSUSE-SU-2026:20469-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20469-1 advisory. This update for cockpit-packages fixes the following issue: Update cockpit-packages to version 4: - CVE-2026-26996: minimatch: ReDoS when glob pattern...

AlmaLinux 9 : python3.9 (ALSA-2026:6766)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:6766 advisory. python: Python: Command-line option injection in webbrowser.open via crafted URLs CVE-2026-4519 Tenable has extracted the preceding description block directly from...

RockyLinux 10 : libtiff (RLSA-2026:7081)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:7081 advisory. libtiff: Segment fault in libtiff in TIFFReadRGBATileExt leading to denial of service CVE-2023-52356 Tenable has extracted the preceding description block direct...