CVE-2025-44904 affecting package hdf5 for versions less than 1.14.6-3

CVE-2025-44904 affecting package hdf5 for versions less than 1.14.6-3. A patched version of the package is available...

CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58250 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

CVE-2026-58208 affecting package telegraf for versions less than 1.31.0-24

CVE-2026-58208 affecting package telegraf for versions less than 1.31.0-24. A patched version of the package is available...

PT-2026-60992

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/web fetch/web fetch.py. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit ha...

CVE-2026-54464

The CVE-2026-54464 issue affects the websocket-driver Ruby library. When used with the permessage-deflate extension, WebSocket servers/clients can accept messages larger than the configured maximum because length checks use the compressed data size (frame length headers) instead of the decompress...

CVE-2026-43010 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-43010 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2025-23131 affecting package kernel for versions less than 6.6.144.1-1

CVE-2025-23131 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-46140 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46140 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-53232 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53232 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-46242 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46242 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-46252 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46252 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-46135 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-46135 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

CVE-2026-44251

CVE-2026-44251 affects Wazuh. A size_t underflow in os_crypto/shared/msgs.c:389 in versions 3.0.0–4.14.4 can cause a crash of the wazuh-remoted process on the manager, immediately disconnecting all enrolled agents, with a possible second path leading to heap memory corruption. The issue has been ...

K000162178: NLnet Labs Unbound vulnerability CVE-2026-40622

Security Advisory Description NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain window by up to one cached TTL configured value. Similar to other 'ghost domain names' attacks, an...

Exploit for SQL Injection in Apache Fineract

🛡️ CVE-2026-57821 – Apache Fineract SQL Injection ⚠️ LEG...

GHSA-824W-X939-6CMC TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

Impact The /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero objectstorage configuration. By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may...

TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

Impact The /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero objectstorage configuration. By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may...

GHSA-WJHR-76VG-2HVC garminconnect Has Insecure Permission Assignment for Garmin OAuth Token Store

Insecure Permission Assignment for Garmin OAuth Token Store Summary garminconnect ≤ 0.3.4 wrote its OAuth token store to disk without restricting file-system permissions. Under the default Linux umask 022 the token file garmintokens.json was created world-readable 0o644. The file contains the DI...

SUSE CVE-2026-25541

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...

PT-2026-60377

Name of the Vulnerable Software and Affected Versions TensorZero versions prior to 2026.6.0 Description The /internal/object storage endpoint accepts a caller-supplied JSON storage path parameter that dynamically overrides the object storage configuration. By abusing the filesystem storage type, ...