North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to JFrog, the packages "rollup-packages-polyfill-core" and "rollup-runtime-polyfill-core" mimic the...

RHSA-2026:35016 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:35111 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:32974 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:32963 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

Photon OS 4.0: Gst PHSA-2026-4.0-1045

An update of the gst package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1045. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid32498...

Linux Distros Unpatched Vulnerability : CVE-2026-12996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak...

GHSA-89QX-M49C-8CRF vulnerabilities

Vulnerabilities for packages: mods...

GHSA-FX2H-PF6J-XCFF vulnerabilities

Vulnerabilities for packages: langfuse, gitlab-rails-ce-fips, langfuse-fips, nextcloud-server...

GHSA-5QMP-9X47-92Q8 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GHSA-86M8-88FQ-XFXP vulnerabilities

Vulnerabilities for packages: gotenberg...

Security Bulletin: Path Traversal in APIRequest Component via Content-Disposition Header

Summary A path traversal vulnerability existed in the APIRequest component when the "Save to File" feature was enabled. The component extracted filenames from server-controlled Content-Disposition headers without proper sanitization, allowing an attacker-controlled HTTP response to write files to...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: pam: pam-1.7.2-2.2.hum1 aarch64, x8664 pam-devel-1.7.2-2.2.hum1 aarch64, x8664 pam-doc-1.7.2-2.2.hum1 noarch pam-libs-1.7.2-2.2.hum1 aarch64, x8664 pam-1.7.2-2.2.hum1.src src Security Fixes: pam:...

RHSA-2026:34478 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:34351 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:30267 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:28886 Red Hat Security Advisory: OpenShift Container Platform 4.14.68 packages and security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: composer: composer-2.10.2-1.hum1 noarch composer-2.10.2-1.hum1.src src...

Malicious code in @marketfront/bannerpopup (npm)

The @marketfront/bannerpopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Linux Distros Unpatched Vulnerability : CVE-2026-53467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contain...