Critical: Red Hat Security Advisory: OpenShift Container Platform 4.20.32 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.22.8 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.8 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

installer v13.32.1

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-69248 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-69248 Source advisory:...

c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-69249 via cryptography (3.3.0)

cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-69249 Source advisory:...

hermes-agent has an Uncontrolled Resource Consumption issue

A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function handlewebhookrequest of the file gateway/platforms/feishu.py of the component Webhook Endpoint. Such manipulation leads to resource consumption. The attack can be...

Malicious code in @cacheable/node-cache (npm)

npm/@cacheable/node-cache version 3.1.2 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases...

RHSA-2026:49700 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update

Bulletin has no description...

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...

CVE-2026-18772

Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion...

CVE-2026-68744

creationtimestamp| type| source ---|---|--- 2026-08-04 07:02:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aao5xmsbiko4c...

CVE-2026-14351 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-cng-fips, gitlab-runner-fips, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips...

GHSA-35PC-QWV6-4858 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-cng-fips, gitlab-runner-fips, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips...

Rocket.Chat v8.7.0-rc.4

The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...

[SECURITY] Fedora 44 Update: python-nh3-0.3.6-4.fc44

Python binding to Ammonia HTML sanitizer Rust crate...

PT-2026-67745

Name of the Vulnerable Software and Affected Versions LAMP Rapid Development Platform versions prior to 5.6.2 commit 84b0c27 Description An issue exists in GlueFactory that allows the execution of unsandboxed Groovy scripts from database template fields without compilation restrictions or...

Echoes in the Digital Abyss: Examining the Bubble Surrounding Security and Privacy Discourse in Social Networks

The dissemination of security and privacy education and guidance has been and still remains a challenge today. Social networks represent a potential avenue for sharing best practices, and experimentally they have been found to be effective at this task. While this appears promising, in the real...

CVE-2026-14337: Improper Neutralization of Input During Web Page Generation

Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting XSS vulnerability in a user interface component. Requires a high privileged user with a developer role...

CVE-2026-69100: Improper Control of Generation of Code

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...

PT-2026-67710

Name of the Vulnerable Software and Affected Versions Pega Platform versions 23.1.0 through 25.1.3 Description A stored Cross-site scripting XSS issue exists in a user interface component. This flaw allows a high privileged user with a developer role to execute malicious scripts that are stored o...