170106 matches found
JLSEC-2026-1267 A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function...
A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...
CLSA-2026-1786550111 TuxCare security update for 90 packages (1 CVE)
TuxCare rebuilt 90 packages to address 1 CVE. Fixed in 9.4.57.v20241219-tuxcare.5...
CVE-2026-68969
Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...
CLSA-2026-1786547487 TuxCare security update for org.springframework.pulsar (3 CVEs)
TuxCare rebuilt 6 org.springframework.pulsar packages to address 3 CVEs. Fixed in 1.2.13-tuxcare.1...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.71 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
ROOT-APP-NPM-CVE-2026-44582 CVE-2026-44582 in next - Patched by Root
Root has patched CVE-2026-44582 in the next package for Root:npm. Multiple fixed versions available...
JLSEC-2026-1261 GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single...
GNU patch is vulnerable to a denial of service DoS due to improper validation of hunk single block of changes in diff line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop...
JLSEC-2026-1260 GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified...
GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk single block of changes in diff data structures, causing the application to pass a NULL pointer...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderCss process. An attacker can inject malicious scripts by providing crafted custom styles through the editor settings interface, which are then rendered on backend pages. This is only exploitable if...
CVE-2026-47233 Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024
Admidio is an open-source user management solution. Version 5.0.9 added a missing isAdministratorInventory gate to case 'itemdelete': in modules/inventory.php. The same fix was not applied to the sibling case 'fielddelete': handler, which destroys an entire inventory field definition, cascading t...
Patch Tuesday: Update now to fix 421 flaws, including three zero-days
Microsoft’s August 2026 Patch Tuesday addresses 421 Microsoft vulnerabilities, including 62 rated Critical. One Windows vulnerability has been exploited in the wild by the Lazarus group to gain SYSTEM privileges. The August update is smaller than July’s record-breaking release, but it's still amo...
MINI-VHPV-68F9-MXMP
Bulletin has no description...
ROOT-APP-NUGET-CVE-2026-40894 CVE-2026-40894 in OpenTelemetry.Api - Patched by Root
Root has patched CVE-2026-40894 in the OpenTelemetry.Api package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-45688 CVE-2022-45688 in org.json:json - Patched by Root
Root has patched CVE-2022-45688 in the org.json:json package for Root:Maven. Multiple fixed versions available...
CLSA-2026-1786538556 TuxCare security update for 14 packages (3 CVEs)
TuxCare rebuilt 14 packages to address 3 CVEs. Fixed in 14.2.35-tuxcare.6...
ROOT-APP-PYPI-CVE-2026-34520 CVE-2026-34520 in aiohttp - Patched by Root
Root has patched CVE-2026-34520 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-23829 CVE-2024-23829 in aiohttp - Patched by Root
Root has patched CVE-2024-23829 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
CVE-2026-11325 cloudflare/pages-action is deprecated — migration required by September 18th, 2026
Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...
CVE-2026-11325
Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...