CVE-2026-67215 cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtilsApplyPatches or cJSONUtilsApplyPatchesCaseSensitive. A patch containing add and copy operations grafts duplicated subtrees to amplify document...

CVE-2026-67215

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtilsApplyPatches or cJSONUtilsApplyPatchesCaseSensitive. A patch containing add and copy operations grafts duplicated subtrees to amplify document...

ROOT-APP-NPM-CVE-2026-44489 CVE-2026-44489 in @rootio/axios - Patched by Root

Root has patched CVE-2026-44489 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2023-50495 CVE-2023-50495 in rootio-ncurses - Patched by Root

Root has patched CVE-2023-50495 in the rootio-ncurses package for Root:Ubuntu:22.04. Multiple fixed versions available...

Security Bulletin: A Use After Free vulnerability may affect TXSeries for Multiplatforms (CVE-2025-38000).

Summary A Use After Free vulnerability may affect TXSeries for Multiplatforms CVE-2025-38000. To address the vulnerability, the base container image for TXSeries for Multiplatforms has been updated to Red Hat Enterprise Linux RHEL Universal Base Image UBI 9 Minimal. Vulnerability Details...

ROOT-OS-UBUNTU-2204-CVE-2026-4438 CVE-2026-4438 in rootio-glibc - Patched by Root

Root has patched CVE-2026-4438 in the rootio-glibc package for Root:Ubuntu:22.04. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-42493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly...

Linux Distros Unpatched Vulnerability : CVE-2026-59942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can...

Linux Distros Unpatched Vulnerability : CVE-2026-62435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant...

Linux Distros Unpatched Vulnerability : CVE-2026-62431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a DE fault...

Linux Distros Unpatched Vulnerability : CVE-2026-50735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in...

SUSE SLES15 Security Update : kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:3344-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3344-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3369-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3369-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3321-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3321-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.11 fixes various security issues: The following security issues were fixed: -...

Linux Distros Unpatched Vulnerability : CVE-2026-64560

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-cpu-timers: Prevent UAF caused by non-leader exec race Wongi and Jungwoo decoded and reported a non-leader exec related race which can result in an UAF:...

Linux Distros Unpatched Vulnerability : CVE-2026-54603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect OIDC. From 0.4.0 to 2.0.21, a protocol-relative redirect...

RHEL 9 : kpatch-patch (RHSA-2026:47983)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47983 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

Linux Distros Unpatched Vulnerability : CVE-2026-67217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in applypatch in cJSONUtils.c. For a replace operation that is missing its value...

Linux Distros Unpatched Vulnerability : CVE-2026-58180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Traffic Server txnbox plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9,...

RHEL 9 : kpatch-patch (RHSA-2026:47984)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47984 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...