199721 matches found
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity. The affected packages are listed below - @asyncapi/[email protected]...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.48 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
RockyLinux 10 : git-lfs (RLSA-2026:39272)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39272 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 Tenable has extracted the preceding description block...
AlmaLinux 8 : python3 (ALSA-2026:39320)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39320 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...
Oracle Linux 10 : glibc (ELSA-2026-19061)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19061 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...
Oracle Linux 9 : cups (ELSA-2026-39316)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39316 advisory. 1:2.3.3op2-39 - RHEL-177957 CVE-2026-34980 cups: control character injection in option values Tenable has extracted the preceding description block directly fr...
Oracle Linux 7 : 389-ds-base (ELSA-2026-26453)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26453 advisory. - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-14905 Orabug: 39146844 Tenable has extracted the preceding description block...
RockyLinux 8 : python3 (RLSA-2026:39320)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39320 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding description...
RockyLinux 8 : pacemaker (RLSA-2026:39322)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39322 advisory. pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVE-2026-10649 Tenable has extracted the preceding description block...
Important Photon OS Security Update - PHSA-2026-4.0-1058
Updates of 'mysql' packages of Photon OS have been released...
CVE-2026-4360 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-0864 vulnerabilities
Vulnerabilities for packages: python...
GHSA-GF2W-JQMQ-FCM8 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-11972 vulnerabilities
Vulnerabilities for packages: python...
GHSA-9MC4-RQMQ-H467 vulnerabilities
Vulnerabilities for packages: python...
GHSA-WQXF-PJXH-HH4H vulnerabilities
Vulnerabilities for packages: python...
GHSA-G345-7JG6-M22P vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-59871 vulnerabilities
Vulnerabilities for packages: actions-runner, gitlab-rails-ce, code-server, kibana, sqlpad, pulumi, wazuh-dashboard, graalvm, opensearch-dashboards, saf, kubeflow-centraldashboard, wazuh-dashboard-fips, npm, lerna, gitlab-rails-ce-fips, opensearch-dashboards-fips, homepage, prism...
