Linux Distros Unpatched Vulnerability : CVE-2026-61627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libass - None Ubuntu Linux - GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wraplinesmeasure CVE-2026-61627 Note that Nessus relies on the...

EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2026-2659)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

CVE-2026-15607

A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes. The attack ma...

CVE-2026-15607

TanStack DB up to 0.6.8 contains a vulnerability in the Alias Path Handler’s select function (src/query/compiler/select.ts) that allows improperly controlled modification of object prototype attributes (prototype pollution). Impacted component: TanStack DB; vulnerability arises from the select fu...

PYSEC-2026-3074 sqlite-mcp has an Injection issue

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extracttojson of the file src/entry.py. Performing a manipulation of the argument outputfilename results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

PYSEC-2026-2484 FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)

A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function apigenerate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be...

PYSEC-2026-2396 Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit

Summary An issue has been identified in the Bedrock AgentCore Starter Toolkit versions prior to v0.1.13 that may allow a remote actor to inject code during the build process, leading to code execution in the AgentCore Runtime. Impact A remote actor could inject code during the build process,...

PYSEC-2026-2627 MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access

Impact Server-Side Request Forgery SSRF: A security vulnerability exists in the mcp-run-python tool specifically within the Pydantic-AI integration due to an overly permissive Deno sandbox configuration. The tool configures the Deno runtime—which is intended to isolate the execution of untrusted...

PYSEC-2026-2453 Docassemble unauthorized access through URL manipulation

Impact The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. Patches The vulnerability has been patched in version 1.4.97 of the master branch. The Docker image on docker.io has been patched...

PYSEC-2026-3116 TensorFlow has Null Pointer Error in TensorArrayConcatV2

Impact When ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer. python import tensorflow as tf tf.rawops.TensorArrayConcatV2handle='a', 'b', flowin = 0.1, dtype=tf.int32, elementshapeexcept0=1 Patches We have patched the issue in GitHub commit...

CVE-2026-60002 affecting package openssh for versions less than 9.8p1-9

CVE-2026-60002 affecting package openssh for versions less than 9.8p1-9. A patched version of the package is available...

CVE-2026-59999 affecting package openssh for versions less than 9.8p1-9

CVE-2026-59999 affecting package openssh for versions less than 9.8p1-9. A patched version of the package is available...

CVE-2026-8927 affecting package curl for versions less than 8.11.1-10

CVE-2026-8927 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

CVE-2026-12912 affecting package libtiff for versions less than 4.6.0-14

CVE-2026-12912 affecting package libtiff for versions less than 4.6.0-14. A patched version of the package is available...

CVE-2026-46680 affecting package moby-containerd-cc for versions less than 1.7.7-15

CVE-2026-46680 affecting package moby-containerd-cc for versions less than 1.7.7-15. A patched version of the package is available...

ROOT-OS-DEBIAN-12-CVE-2025-58436 CVE-2025-58436 in rootio-cups - Patched by Root

Root has patched CVE-2025-58436 in the rootio-cups package for Root:Debian:12. Multiple fixed versions available...

EulerOS 2.0 SP12 : openjpeg2 (EulerOS-SA-2026-2609)

According to the versions of the openjpeg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library...

PT-2026-57352

Impact The redirect follower middleware previously failed to strip a number of headers that are known to be sensitive and did not provide a way to provide a custom list of headers to strip. What kind of vulnerability is it? Who is impacted? This could cause inadvertent leakage of sensitive data f...

Linux Distros Unpatched Vulnerability : CVE-2026-58387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-58387 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

Linux Distros Unpatched Vulnerability : CVE-2026-15171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service CVE-2026-15171 Note that Nessus relies on the presence of...