CVE-2026-59696 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-59696 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-74835 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-74835 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-17106 affecting package moby-engine for versions less than 25.0.3-20

CVE-2026-17106 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...

CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-19

CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...

firefox: thunderbird: Site isolation issue in the WebExtensions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the WebExtensions component...

CVE-2026-73086 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, gitlab-rails-ce-fips, jupyter-base-notebook, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips...

CVE-2026-63074 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

EUVD-2026-74189

The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering SSR environment where module state persists across HTTP requests. Under the listed preconditions, tokens cached in module memory...

CVE-2026-84685

The react-native-auth0 SDK 's web platform implementation fails to scope its in-memory token cache to individual user sessions in server-side rendering (SSR) environments where module state persists across HTTP requests. As a result, tokens cached in module memory can be retrieved by subsequent r...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-69708

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

EUVD-2026-74038

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-82068

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentiall...

CVE-2026-82062

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

CVE-2026-69708

CVE-2026-69708 is a use-after-free vulnerability in Windows Web Platform Storage that allows a locally authorized attacker to elevate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access, low p...

EUVD-2026-73613

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destination

A flaw was found in the Python tarfile module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX Portable Operating System Interface platforms. This occurs when processing a specially crafted archive containing member names...

CVE-2026-12650

creationtimestamp| type| source ---|---|--- 2026-09-08 16:08:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzfsirsjt2t 2026-09-08 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzrnexv4z2f 2026-09-09 20:00:05+00:00| seen|...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.13 packages and security update

Red Hat OpenShift Container Platform release 4.22.13 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...