SUSE CVE-2026-54167

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before...

SUSE CVE-2026-55061

uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNIGETEDITOR or EDITOR with strings.Spliteditor, " " and passes every space-delimited suffix as an argument to the selected editor executable. An attacker who can...

SUSE CVE-2026-55062

uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the selected hooks directory, allowing parent-directory components to escape that directory. The resulting path is passed ...

SUSE CVE-2026-85047

Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-85498

unknown...

GHSA-83VM-P52W-F9PW vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9...

CVE-2026-78680 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-WW6M-CW3F-Q94G vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-71513 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-72818 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-81723 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2026-10142 vulnerabilities

Vulnerabilities for packages: mlrun, mlrun-fips...

GHSA-M28W-2PQF-7QGJ vulnerabilities

Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows...

CVE-2026-81722 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-CW6X-M8JW-QMRH vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-80112

creationtimestamp| type| source ---|---|--- 2026-09-04 20:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupqxz52e32z 2026-09-08 03:20:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muy2uxeu422b 2026-09-08 03:20:06+00:00| seen|...

CVE-2026-61608

SolidInvoice , an open-source invoicing platform, is affected by a flaw in its UserInvitation entities prior to version 3.0.1 . The root cause is the absence of an expiry timestamp on invitation tokens, causing mailed invitation links to remain valid indefinitely. An attacker who obtains a leaked...

CVE-2026-61608 SolidInvoice's user invitation tokens have no expiry, allowing indefinite unauthorized company access via leaked or old invitation links

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, UserInvitation entities have no expiry timestamp. Invitation links mailed to users remain valid indefinitely, meaning a leaked, forwarded, or archived invitation email can be used at any time in the future to join a compan...

The hidden work of modernizing Malwarebytes

Most of the work that keeps a security product trustworthy is invisible. Users see a scan complete, a threat blocked, an update applied overnight. They don’t see the platform underneath. Runtimes, managed libraries, native drivers, and Windows requirements must all stay current and work together...

CVE-2026-80896

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshvirqfddeassign mshvirqfddeactivate and the hlist traversal of ptirqfdslist require pt-ptirqfdslock to be held, but mshvirqfddeassign omits it. This races with the EPOLLHUP path in mshvirqfdwakeup, which does...