6540 matches found
CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3
CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...
CVE-2026-58227 affecting package erlang for versions less than 26.2.5.21-3
CVE-2026-58227 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...
CVE-2026-59251 affecting package erlang for versions less than 26.2.5.21-3
CVE-2026-59251 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...
CVE-2026-55969 affecting package vitess for versions less than 19.0.4-12
CVE-2026-55969 affecting package vitess for versions less than 19.0.4-12. A patched version of the package is available...
CVE-2026-42792 affecting package erlang for versions less than 26.2.5.21-3
CVE-2026-42792 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...
CVE-2026-69253
Summary of findings (CVE-2026-69253). Flowise allowed in-process vm2 sandbox JavaScript execution for several tools (AgentAsTool, ChatflowTool, ExecuteFlow) with the baseURL injected into generated code, enabling code injection and sandbox escape. The vulnerability arises because baseURL validati...
CLSA-2026-1785291891 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 1.7.5-tuxcare.5...
CLSA-2026-1784769523 TuxCare security update for webpack-dev-server (1 CVE)
TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 3.11.3-tuxcare.3...
CLSA-2026-1781657698 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.31-tuxcare.4...
CLSA-2026-1780966309 TuxCare security update for langgraph-checkpoint (1 CVE)
TuxCare rebuilt langgraph-checkpoint to address 1 CVE. Fixed in 2.1.2.post2+tuxcare...
CVE-2026-69245 Guzzle: Noncanonical cookie domain keeps subdomain scope
Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, SetCookie::matchesDomain gives every subdomain of a cookie Domain that cookie unless SetCookie::matchesDomain recognizes the Domain as an IP literal or a numeric host, and the decision comes from the domain's own text, so two...
CVE-2026-56852 affecting package kata-containers for versions less than 3.19.1.kata3-7
CVE-2026-56852 affecting package kata-containers for versions less than 3.19.1.kata3-7. A patched version of the package is available...
Linux Distros Unpatched Vulnerability : CVE-2026-62959
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a...
SUSE CVE-2026-46717
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, nezha's dashboard supports two user roles: RoleAdmin Role==0 and RoleMember Role==1. The notification routes POST /api/v1/notification and PATCH...
SUSE CVE-2026-49822
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a low-privilege developer who could create a KubernetesWatchTrigger KWT in their own namespace was able to establish a persistent...
CVE-2026-56852 affecting package vitess for versions less than 19.0.4-11
CVE-2026-56852 affecting package vitess for versions less than 19.0.4-11. A patched version of the package is available...
CVE-2026-56852 affecting package ignition-flatcar for versions less than 2.22.0-6
CVE-2026-56852 affecting package ignition-flatcar for versions less than 2.22.0-6. A patched version of the package is available...
CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7
CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...