CVE-2026-59867 Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota resolved OpenAPI $ref values by fetching remote https URLs and reading local absolute or out-of-tree file paths, allowing kiota generate on an attacker-controlled or attacker-influenced description to perform...

MINI-52JP-85WR-GXM3

Bulletin has no description...

MINI-3WCV-PX9X-CMFQ

Bulletin has no description...

MINI-22H6-CH34-FCJQ

Bulletin has no description...

MINI-HPRP-M653-QVQ7

Bulletin has no description...

MINI-343J-83V7-W4RF

Bulletin has no description...

MINI-MM9X-PH5W-6777

Bulletin has no description...

MINI-P996-4R2C-6C8J

Bulletin has no description...

MINI-XM43-XFPF-9532

Bulletin has no description...

MINI-26V8-27XC-X3Q2

Bulletin has no description...

MINI-JCX7-RFPR-8PR3

Bulletin has no description...

RLSA-2026:39771 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

ECHO-CB0F-B3CD-B8AB

Bulletin has no description...

SUSE-SU-2026:22679-1 Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve maclen headroom when recompressed SRH grows bsc1266015. - CVE-2026-45970: bonding: alb: fix UAF in rlbarprecv during bond up/dow...

MINI-38MP-F2JQ-J68V

Bulletin has no description...

MINI-5P37-PV7C-H54X

Bulletin has no description...

MINI-RG69-P283-6C7G

Bulletin has no description...

MINI-GVR7-8RP4-J35P

Bulletin has no description...

MINI-H3GP-9245-5GF4

Bulletin has no description...

Malicious Package

Overview field-plus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...