CLSA-2026-1792194451 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792194447 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792194450 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.11.5-tuxcare.1...

CLSA-2026-1792194449 TuxCare security update for @babel/plugin-transform-runtime (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-runtime to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792194441 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.23.2-tuxcare.2...

CLSA-2026-1792194436 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.23.9-tuxcare.3...

CLSA-2026-1792194435 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.11.5-tuxcare.3...

CLSA-2026-1792194434 TuxCare security update for @babel/plugin-transform-runtime (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-runtime to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792194433 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792194431 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

CLSA-2026-1792194430 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1792194432 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792194429 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CVE-2026-67413

A flaw was found in rabbitmq-server. An authenticated user with permissions to bind and publish messages can cause a Denial of Service DoS by submitting specially crafted pattern-matching expressions to the Java Message Service JMS topic exchange plugin. Because the message broker evaluates these...

CVE-2026-67230

A flaw was found in RabbitMQ. When the Web STOMP plugin is enabled, the WebSocket handler fails to enforce maximum frame size limits or login timeouts prior to client authentication. An unauthenticated remote attacker can exploit this vulnerability by sending a continuous stream of small frames t...

CVE-2026-67223

A flaw was found in rabbitmq-server. When the service uses the Lightweight Directory Access Protocol LDAP authentication plugin with a configured user Distinguished Name DN pattern, it fails to properly escape special characters in the username. A remote attacker can exploit this vulnerability by...

CVE-2026-67222

A flaw was found in rabbitmq-server. An authenticated remote attacker with policymaker privileges can exploit this issue when the Shovel or Federation plugin is enabled by supplying a specially crafted authentication mechanism value. This causes the server to permanently exhaust Erlang virtual...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-93749 DESCRIPTION:...

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.7.4 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Ekene Umegakwe in WordPress Plugin LatePoint versions = 5.7.4...

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

Summary A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint with no declared ports. The built-in k8sexternal transferer can emit an empty...