CLSA-2026-1782159797 Fix CVE(s): CVE-2026-3238

CVE-2026-3238: source4 WINS server NULL pointer dereference in nbtdwinsserverregister/query/release; craft NBT packets with qdcount=0, arcount=0, or empty netbios addresses crash the nbt process on servers running wins support = yes typical AD DC role. Fix dissolves direct variable initialization...

EUVD-2025-122946

Malicious code in query-release-it-pulsar-nextjs npm...