CVE-2026-39829 affecting package packer for versions less than 1.9.5-14

CVE-2026-39829 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-25680 affecting package packer for versions less than 1.9.5-14

CVE-2026-25680 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-46597 affecting package packer for versions less than 1.9.5-14

CVE-2026-46597 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-39821 affecting package packer for versions less than 1.9.5-14

CVE-2026-39821 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-25681 affecting package packer for versions less than 1.9.5-14

CVE-2026-25681 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-39827 affecting package packer for versions less than 1.9.5-14

CVE-2026-39827 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-42506 affecting package packer for versions less than 1.9.5-14

CVE-2026-42506 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-39835 affecting package packer for versions less than 1.9.5-14

CVE-2026-39835 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-39830 affecting package packer for versions less than 1.9.5-14

CVE-2026-39830 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-39834 affecting package packer for versions less than 1.9.5-14

CVE-2026-39834 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

AZL-88209 CVE-2026-42502 affecting package packer for versions less than 1.9.5-15

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-88200 CVE-2026-25680 affecting package packer for versions less than 1.9.5-15

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-88182 CVE-2026-46597 affecting package packer for versions less than 1.9.5-15

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: syft-fips, pulumi-language-java, crossplane-fips, flux, act, cg, guac, trivy-operator-fips, kubevela-fips, terragrunt, terragrunt-fips, pulumi, tfsec, kargo, src-fingerprint-fips, cloudbeat-fips, external-secrets-operator-fips, external-secrets-operator,...

[SECURITY] Fedora 42 Update: perl-PAR-Packer-1.064-3.fc42

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

Fedora: Security Advisory (FEDORA-2026-58dd426edd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2026-58dd426edd)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-58dd426edd advisory. Update for Perl 5.40.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: syft-fips, pulumi-language-java, crossplane-fips, flux, cg, guac, trivy-operator-fips, kubevela-fips, tfsec, pulumi, kargo, src-fingerprint-fips, cloudbeat-fips, external-secrets-operator-fips, external-secrets-operator, kubescape-server-fips, kubevela,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: syft-fips, pulumi-language-java, crossplane-fips, flux, cg, guac, trivy-operator-fips, kubevela-fips, tfsec, pulumi, kargo, src-fingerprint-fips, cloudbeat-fips, external-secrets-operator-fips, external-secrets-operator, kubescape-server-fips, kubevela,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: syft-fips, pulumi-language-java, crossplane-fips, flux, cg, guac, trivy-operator-fips, kubevela-fips, tfsec, pulumi, kargo, src-fingerprint-fips, cloudbeat-fips, external-secrets-operator-fips, external-secrets-operator, kubescape-server-fips, kubevela,...