CVE-2026-60432

A vulnerability exists in the Image Packaging System component of Oracle Solaris versions 11.3 and 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation can lead to a complete takeover of Oracle Solaris . Whi...

PT-2026-119532

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 11.3 and 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover of the affecte...

PT-2026-119729

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via TLS to compromise the system. Exploitation is difficult and requires human interaction from a user other th...

PT-2026-119732

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data or...

PT-2026-119736

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description An issue exists in the Image Packaging System component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction a...

Oracle Linux 8 : nodejs:22 (ELSA-2026-75870)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75870 advisory. - Patches pacote CVE and updates undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259888 RHEL-255268 nodejs-nodemon - Rebase...

Astra Linux – Vulnerability in Chromium

Using use after free in Web Packaging in Google Chrome before version 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Low...

nodejs:22 security update

nodejs 1:22.23.2-2 - Patches pacote CVE and updates undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259888 RHEL-255268 nodejs-nodemon 3.1.14-2 - Rebase npm/brace-expansion to 5.0.9 Fixes: CVE-2026-69152 Resolves: RHEL-223760 nodejs-packaging 2021.06-4 - Exclude ix86 arches fro...

ROOT-APP-PYPI-CVE-2026-32874 CVE-2026-32874 in ujson - Patched by Root

Root has patched CVE-2026-32874 in the ujson package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-34518 CVE-2026-34518 in aiohttp - Patched by Root

Root has patched CVE-2026-34518 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_75870)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202675870 advisory. pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function CVE-2026-9496 undici: undici: Denial of Service via unrequested...

setuptools Unicode Data Compromise

The vulnerability of the setuptools project’s packaging simplification library is related to incorrect handling of Unicode characters. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2019_2925)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20192925 advisory. HTTP/2: large amount of data requests leads to denial of service CVE-2019-9511 HTTP/2: flood using PING frames results in unbounded memory growth...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2023_4537)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234537 advisory. nodejs: mainModule.proto bypass experimental policy mechanism CVE-2023-30581 nodejs: process interuption due to invalid Public Key information in x509...

Rocky Linux 9 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2025_1613)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20251613 advisory. undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083 nodejs: GOAWA...

Rocky Linux 9 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2025_1443)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20251443 advisory. undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083 nodejs: GOAWA...

Rocky Linux 9 [CIQ] Security Update: nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2023_3577)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20233577 advisory. c-ares: 0-byte UDP payload Denial of Service CVE-2023-32067 c-ares: Buffer Underwrite in aresinetnetpton CVE-2023-31130 c-ares: Insufficient randomness in...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlea-2020_0330)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlea-20200330 advisory. The following packages have been upgraded to a later upstream version: nodejs 12.14.1. BZ1791067 This advisory is provided by Ctrl IQ, Inc for Rocky Linux...

Rocky Linux 9.2 [CIQ] Security Update: nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (ciqsa-2026_1022)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261022 advisory. This advisory aggregates security fixes for the nodejs-packaging SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-21892, CVE-2024-22019, CVE-2023-46809...

Rocky Linux 9 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2025_1446)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20251446 advisory. undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: GOAWAY HTTP/2 frames cause memory leak outside heap CVE-2025-23085 Tenable has...