CVE-2026-46383 Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a...

EUVD-2026-30559

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a...

CVE-2026-46383

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a...

OESA-2026-2323 gvfs security update

Gvfs is a userspace virtual filesystem implementation for GIO a library available in GLib. It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security...

PT-2026-41317

Name of the Vulnerable Software and Affected Versions Microsoft APM versions prior to 0.13.0 Description Microsoft APM contains a Windows-specific archive extraction boundary failure affecting users on Python 3.10 and 3.11 runtimes. When the apm install command is provided with a local .tar.gz fi...

UGen: An Agentic Framework for Generating Microarchitectural Attack PoCs

Microarchitectural attacks continue to evolve, uncovering new exploitation vectors in modern processors. From a defensive perspective, assessing a system's susceptibility to such attacks remains challenging. Developing functional attack implementations is labor-intensive, requires deep...

SUSE CVE-2026-43375

In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while the interface is bound to a driver and there is no need to take additional references unless the...

SUSE CVE-2026-43460

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove callback The driver uses devmspiregistercontroller for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to...

com.github.psi-probe:psi-probe-tomcat85 (3.5.4), org.apache.tomcat:tomcat-catalina-ha (8.5.64) +5 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.64)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.4 - org.apache.tomcat:tomcat-catalina-ha 8.5.64 ...

com.github.psi-probe:psi-probe-tomcat85 (>=3.7.0, <=3.7.1), org.apache.tomcat:tomcat-catalina-ha (8.5.84) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.84)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =3.7.0, =3.7.1 - org.apache.tomcat:tomcat-catalina-h...

com.github.psi-probe:psi-probe-tomcat85 (>=4.1.1, <=4.1.2), org.apache.tomcat:tomcat-catalina-ha (8.5.98) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.98)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.98 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =4.1.1, =4.1.2 - org.apache.tomcat:tomcat-catalina-h...

com.github.psi-probe:psi-probe-tomcat85 (>=4.1.3, <=4.1.4), org.apache.tomcat:tomcat-catalina-ha (8.5.99) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.99)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =4.1.3, =21.0.0.final, =21.0.0.final, =22.0.0.final...

com.github.psi-probe:psi-probe-tomcat7 (3.0.0), com.github.waffle:waffle-tomcat7 (1.9.0) +5 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.86)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat7 3.0.0 - com.github.waffle:waffle-tomcat7 1.9.0 -...

com.github.psi-probe:psi-probe-tomcat85 (3.5.5), org.apache.tomcat:tomcat-catalina-ha (8.5.70) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.70)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.70 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.5 - org.apache.tomcat:tomcat-catalina-ha 8.5.70 ...

com.github.psi-probe:psi-probe-tomcat85 (3.5.6), com.github.waffle:waffle-tomcat85 (>=3.1.0, <=3.1.1) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.73)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.73 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.6 - com.github.waffle:waffle-tomcat85 =3.1.0,...

com.github.psi-probe:psi-probe-tomcat85 (>=3.7.0, <=3.7.1), org.apache.tomcat:tomcat-catalina-ha (8.5.84) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.84)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =3.7.0, =3.7.1 - org.apache.tomcat:tomcat-catalina-h...

com.github.psi-probe:psi-probe-tomcat8 (3.1.0), com.github.waffle:waffle-tomcat8 (1.9.1) +6 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.52)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.1.0 - com.github.waffle:waffle-tomcat8 1.9.1 -...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0), com.github.waffle:waffle-tomcat8 (1.9.0) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.51)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0 - com.github.waffle:waffle-tomcat8 1.9.0 -...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0.rc2), ml.alternet:alternet-security-tomcat-8.0 (1.0) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.45)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0.rc2 - ml.alternet:alternet-security-tomcat-8.0...

com.github.psi-probe:psi-probe-core (3.0.0), com.github.psi-probe:psi-probe-tomcat85 (3.0.0) +5 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.30)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-core 3.0.0 - com.github.psi-probe:psi-probe-tomcat85 3.0.0 -...