CLEANSTART-2026-ZQ70340 Security fix for CVE-2018-1000156 applied in: patch 2.7.6-r6

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101993

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100957

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100895

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101015

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100102

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101053

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102255

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-56289 affecting package patch for versions less than 2.7.6-10

CVE-2026-56289 affecting package patch for versions less than 2.7.6-10. A patched version of the package is available...

Photon OS 5.0: Patch PHSA-2024-5.0-91-0201

An update of the patch package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0201. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

pnpm < 10.34.0 / 11.x < 11.4.0 Multiple Vulnerabilities

The version of pnpm installed on the remote host is prior to 10.34.0, or 11.x prior to 11.4.0. It is, therefore, affected by multiple vulnerabilities: - pnpm allows a transitive dependency alias from registry package metadata to contain path traversal segments. During install, pnpm later uses tha...

GHSA-RXHJ-4M44-96R4 pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

Summary pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or delete arbitrary files on the filesystem during pn...

pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

Summary pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or delete arbitrary files on the filesystem during pn...

PT-2026-52514

Name of the Vulnerable Software and Affected Versions pnpm versions prior to 10.34.0 pnpm versions prior to 11.4.0 Description The patch application pipeline @pnpm/patch-package fails to validate file paths extracted from .patch files. An attacker can provide a malicious patch file containing...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package developed by Samsung Electronics of South Korea. It provides patches for Samsung mobile applications. Versions prior to SAMSUNG SMR May-2026 Release 1 contained security vulnerabilities, which were caused by improper handling of insufficient permissions. Thes...

CLEANSTART-2026-PM79547 Security fixes for CVE-2018-20969, CVE-2018-6952, CVE-2019-13636, CVE-2019-13638, CVE-2019-20633 applied in versions: 2.7.6-r2, 2.7.6-r4, 2.7.6-r5, 2.7.6-r6, 2.7.6-r7

Multiple security vulnerabilities affect the patch package. These issues are resolved in later releases. See references for individual vulnerability details...

openSUSE Security Advisory (SUSE-SU-2026:0781-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:20431-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 16 Security Update : patch (openSUSE-SU-2026:20227-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20227-1 advisory. - CVE-2021-45261: invalid pointer via anotherhunk function can cause a denial-of-service bsc1194037. Tenable has extracted the preceding description blo...

RHEL 8 : kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_81_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 (RHSA-2026:2557)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2557 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module i...