CVE-2026-13107

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

EUVD-2026-78082

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

CVE-2026-13107

IBM Business Automation Workflow (containers and traditional) versions 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, and 26.0.0-IF001 may use programming model artifacts in Advanced custom applications that are vulnerable to XML External Entity (XXE) injection by default (CWE-611). A remote authentic...

CVE-2026-13107 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

CVE-2026-13107 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

CVE-2026-13107: Improper Restriction of XML External Entity Reference

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

PT-2026-91461

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default...

CVE-2026-46421: Embedded Malicious Code

The SAP Cloud Application Programming Model is a tool for building enterprise-grade cloud applications, and cap-js/cds-dbs is the monorepo for SQL database services for that tool. On April 29, 2026, compromised versions of @cap-js/[email protected], @cap-js/[email protected], and @cap-js/[email protected]....

Microsoft .NET Framework Denial of Service Vulnerability (CNVD-2022-60136)

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...

[SECURITY] Fedora 28 Update: hadoop-2.7.7-1.fc28

Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming model s. It is designed to scale up from single servers to thousands of machines, ea ch offering local computation and storage...

[SECURITY] Fedora 28 Update: hadoop-2.7.6-4.fc28

Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming model s. It is designed to scale up from single servers to thousands of machines, ea ch offering local computation and storage...

[SECURITY] Fedora 25 Update: libsoup-2.56.1-1.fc25

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

Microsoft Visual Basic 6.0 VBP Project File Handling Buffer Overflow (CVE-2007-4776)

Microsoft Visual Basic is a tool for productively building type-safe and object-oriented applications. It allows developers to create a wide range of Windows, Web, mobile and Office applications. Visual Basic VB is an event driven programming language and associated development environment from...