ROOT-OS-UBUNTU-2404-CVE-2025-39734 CVE-2025-39734 in linux - Patched by Root

Root has patched CVE-2025-39734 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-46003 CVE-2026-46003 in linux - Patched by Root

Root has patched CVE-2026-46003 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-38173 CVE-2025-38173 in linux - Patched by Root

Root has patched CVE-2025-38173 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

RLSA-2026:80495 Important: flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git-am CVE-2026-86320 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

flatpak-builder security update

An update is available for flatpak-builder. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak-builder is a tool for building flatpaks from sources. Securi...

RLSA-2026:80496 Important: flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git-am CVE-2026-86320 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

flatpak-builder security update

An update is available for flatpak-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak-builder is a tool for building flatpaks from sources. Securit...

ROOT-APP-PYPI-CVE-2024-45231 CVE-2024-45231 in django - Patched by Root

Root has patched CVE-2024-45231 in the django package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-4565 CVE-2025-4565 in protobuf - Patched by Root

Root has patched CVE-2025-4565 in the protobuf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-69247 CVE-2026-69247 in cryptography - Patched by Root

Root has patched CVE-2026-69247 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root

Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in cryptography - Patched by Root

Root has patched GHSA-537c-gmf6-5ccf in the cryptography package for Root:PyPI. Multiple fixed versions available...

PT-2026-111840

Name of the Vulnerable Software and Affected Versions youlai-boot versions prior to 2.21.2 Description A missing authorization issue allows any authenticated user to enable or disable accounts. This occurs because the updateUserStatus handler lacks a @PreAuthorize check, which is a security...

CVE-2026-110216: Missing Authorization

youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because the updateUserStatus handler lacks a @PreAuthorize check. Attackers can send PATCH requests to /api/v1/users/userId/status to disable root or admin...

CVE-2026-109412: Exposed Dangerous Method or Function

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2026-109341

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

Important: Red Hat Security Advisory: flatpak-builder security update

An update for flatpak-builder is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2026-109341 SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operations

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

EUVD-2026-97643

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...