CLSA-2026-1772410250 TuxCare security update for flask (1 CVE)

TuxCare rebuilt flask to address 1 CVE. Fixed in 1.1.2.post1+tuxcare...

CLSA-2026-1772496679 TuxCare security update for requests (1 CVE)

TuxCare rebuilt requests to address 1 CVE. Fixed in 2.25.1.post1+tuxcare...

CLSA-2025-1756426301 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.post1+tuxcare...

CLSA-2026-1767658110 TuxCare security update for 89 packages (3 CVEs)

TuxCare rebuilt 89 packages to address 3 CVEs. Fixed in 9.4.24.v20191120-tuxcare.1...

CLSA-2025-1765411679 TuxCare security update for 35 packages (2 CVEs)

TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.4...

CLSA-2025-1763597253 TuxCare security update for 88 packages (2 CVEs)

TuxCare rebuilt 88 packages to address 2 CVEs. Fixed in 9.4.53.v20231009-tuxcare.1...

CLSA-2025-1759795580 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.1...

CLSA-2025-1761523598 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.9...

CLSA-2025-1761005194 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.3...

ROOT-APP-NPM-CVE-2024-21490 CVE-2024-21490 in angular - Patched by Root

Root has patched CVE-2024-21490 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-26116 CVE-2023-26116 in angular - Patched by Root

Root has patched CVE-2023-26116 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-7676 CVE-2020-7676 in angular - Patched by Root

Root has patched CVE-2020-7676 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-8373 CVE-2024-8373 in angular - Patched by Root

Root has patched CVE-2024-8373 in the angular package for Root:npm. Multiple fixed versions available...

Exploit for CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE The diffpatch endpo...

ROOT-APP-MAVEN-CVE-2026-54518 CVE-2026-54518 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54518 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-GHSA-2M67-WJPJ-XHG9 GHSA-2m67-wjpj-xhg9 in tools.jackson.core:jackson-core - Patched by Root

Root has patched GHSA-2m67-wjpj-xhg9 in the tools.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...

AIOHTTP: HTTP request smuggling via WebSocket upgrade

SummaryThe HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. ImpactIf using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware ...

gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

Summaryconsultgeminiwithfiles in inline mode read any file path supplied inthe files argument without confining it to the working directory, thenforwarded the contents to the Gemini CLI. Because the caller also controlsquery, the file contents are echoed back through the Gemini round-tripand sent...

PYSEC-2026-3574 gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

Summary consultgeminiwithfiles in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip and...