[SECURITY] Fedora 43 Update: cpp-httplib-0.48.0-1.fc43

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include the httplib.h file in your code!...

[SECURITY] Fedora 44 Update: cpp-httplib-0.48.0-1.fc44

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include the httplib.h file in your code!...

Linux Distros Unpatched Vulnerability : CVE-2026-55952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal...

PT-2026-55515

Name of the Vulnerable Software and Affected Versions Dell Client Platform BIOS affected versions not specified Description An authentication bypass exists that allows an unauthenticated attacker with physical access to the system to potentially exploit the flaw, resulting in information...

ROS-20260703-73-0015

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-55647

Name of the Vulnerable Software and Affected Versions Microsoft Edge for Android affected versions not specified Description A relative path traversal issue exists in Microsoft Edge for Android. This flaw allows an unauthorized attacker to disclose information locally. Path traversal is a techniq...

CVE-2026-27436

creationtimestamp| type| source ---|---|--- 2026-07-02 21:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyqwklut2d 2026-07-31 13:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrx3kxv2272u...

GHSA-2XF2-GJM6-G2C6 vulnerabilities

Vulnerabilities for packages: mods...

GHSA-FX2H-PF6J-XCFF vulnerabilities

Vulnerabilities for packages: langfuse-fips, gitlab-rails-ce-fips, nextcloud-server, langfuse...

GHSA-5QMP-9X47-92Q8 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GHSA-RM97-X556-Q36H vulnerabilities

Vulnerabilities for packages: py3-jupyterlab...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-JX8C-56MG-H6VP vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2026-24512 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

CVE-2026-54891

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data. The...

EEF-CVE-2026-54891 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

Summary Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tls\gen\connection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server...

CVE-2026-54891

The CVE-2026-54891 entry concerns Erlang/OTP ssl (tls_gen_connection.erl) where a network-positioned attacker can inject unauthenticated plaintext during TLS handshake. The tls_gen_connection:handle_protocol_record/3 function rejects APPLICATION_DATA in pre-handshake when acting as a server, but ...