CLEANSTART-2026-SP87460 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

MINI-83X8-PH53-37J4

Bulletin has no description...

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the reuse of an easy handle in HTTP requests when a custom Host: header is set for the initial request and omitted in a subsequent one. An attacker can obtain cookies intended for a different host by exploiti...

PT-2026-35989

Name of the Vulnerable Software and Affected Versions PDFunite version 0.41.0 Description A buffer overflow allows local attackers to crash the application by processing malformed PDF files during merge operations. A segmentation fault can be triggered in the XRef::getEntry function within...

MINI-3H4V-86FM-CMRQ

Bulletin has no description...

MINI-7R9W-624P-795C

Bulletin has no description...

CVE-2026-41649

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

MINI-XPH6-XF46-5GQ3

Bulletin has no description...

CVE-2026-41649

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-41649 Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

EUVD-2026-26144

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

Exploit for CVE-2026-6807

This is functional proof of concept code based on the CISA discl...

MINI-8MQ5-R6VX-7GWH

Bulletin has no description...

MINI-8CM9-6W79-Q458

Bulletin has no description...

MINI-JH2P-F3J4-45RQ

Bulletin has no description...

MINI-3WVG-P8QJ-R3XW

Bulletin has no description...

MINI-2G5V-3F94-VR86

Bulletin has no description...

MINI-P2PP-CM64-M257

Bulletin has no description...

MINI-F7QG-F4Q4-CWHR

Bulletin has no description...

CVE-2026-40556

...