ROOT-OS-UBUNTU-2404-CVE-2025-38264 CVE-2025-38264 in linux - Patched by Root

Root has patched CVE-2025-38264 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-46121 CVE-2026-46121 in linux - Patched by Root

Root has patched CVE-2026-46121 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

RLSA-2026:80495 Important: flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git-am CVE-2026-86320 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

flatpak-builder security update

An update is available for flatpak-builder. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak-builder is a tool for building flatpaks from sources. Securi...

RLSA-2026:80496 Important: flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git-am CVE-2026-86320 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

flatpak-builder security update

An update is available for flatpak-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak-builder is a tool for building flatpaks from sources. Securit...

ROOT-APP-PYPI-CVE-2024-45231 CVE-2024-45231 in django - Patched by Root

Root has patched CVE-2024-45231 in the django package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-4565 CVE-2025-4565 in protobuf - Patched by Root

Root has patched CVE-2025-4565 in the protobuf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-69247 CVE-2026-69247 in cryptography - Patched by Root

Root has patched CVE-2026-69247 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root

Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in cryptography - Patched by Root

Root has patched GHSA-537c-gmf6-5ccf in the cryptography package for Root:PyPI. Multiple fixed versions available...

CVE-2026-110216: Missing Authorization

youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because the updateUserStatus handler lacks a @PreAuthorize check. Attackers can send PATCH requests to /api/v1/users/userId/status to disable root or admin...

CVE-2026-109412: Exposed Dangerous Method or Function

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...

PT-2026-111840

Name of the Vulnerable Software and Affected Versions youlai-boot versions prior to 2.21.2 Description A missing authorization issue allows any authenticated user to enable or disable accounts. This occurs because the updateUserStatus handler lacks a @PreAuthorize check, which is a security...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: flatpak-builder security update

An update for flatpak-builder is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2026-109341

SurrealDB versions prior to 3.3.0 are vulnerable to an authorization bypass that allows users with table-level write permissions to access SELECT-restricted fields . The root cause is the resolution of JSON Patch pointers against an unreduced record, which can be exploited to copy hidden fields i...

EUVD-2026-97643

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

CVE-2026-108951

LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...

ROOT-APP-NUGET-CVE-2025-26646 CVE-2025-26646 in Microsoft.Build.Tasks.Core - Patched by Root

Root has patched CVE-2025-26646 in the Microsoft.Build.Tasks.Core package for Root:NuGet. Multiple fixed versions available...