Linux Distros Unpatched Vulnerability : CVE-2026-44982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRequestFromRequest allocated a request bod...

Fedora 44 : python-libcst (2026-17c484fafa)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-17c484fafa advisory. Update to 1.8.6. Build with PyO3 fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

DEBIAN-CVE-2026-44891

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.stomp.StompSubframeDecoder fails to limit the total number of headers or their cumulative size per frame, and the maxLineLength parameter only...

GHSA-C4GH-RV8H-Q9VW Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader

Summary The TypeScript Prompty loader used gray-matter without overriding executable frontmatter engines. gray-matter supports JavaScript frontmatter blocks such as ---js and evaluates them while parsing. An attacker-controlled .prompty file could therefore execute arbitrary JavaScript during...

EUVD-2026-45274

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.6, the columnConfigAction endpoint in bundles/CustomReportsBundle/src/Controller/Reports/CustomReportController.php passes malicious SQL configuration through CustomReportController:columnConfigAction,...

CVE-2026-15007

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parse...

CVE-2026-15007

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parse...

CVE-2026-15007

The CVE describes a Denial of Service in GitHub Enterprise Server caused by parsing a repository release notes configuration file with deeply nested YAML, without a nesting depth limit. When release notes are generated, this can consume excessive resources and render the instance unresponsive. Af...

EUVD-2026-45188

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parse...

CVE-2026-15007 Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via deeply nested YAML in release notes configuration

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parse...

CVE-2026-15007 Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via deeply nested YAML in release notes configuration

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parse...

CVE-2026-23278 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-23278 affecting package kernel for versions less than 6.6.144.1-1. A patched version of the package is available...

thunderbird security update

140.12.0-1.0.1 - Add Oracle prefs 140.12.0-1 - Update to 140.12.0 ESR 140.11.0-1 - Update to 140.11.0 ESR 140.10.1-1 - Update to 140.10.1 ESR...

The vulnerability of the GPAC multimedia platform, related to improper cleaning or release of resources, allows a violator to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

CVE-2026-15007: Allocation of Resources Without Limits or Throttling

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parse...

go-fdo-server security update

1.0.1-2 - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 1.0.1-1 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 1.0.0-3 - Rebuild to fix CVE-2026-32283...

firefox security update

140.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.12.0-1 - Update to 140.12.0 ESR 140.11.0-1 - Update to 140.11.0 ESR 140.10.2-1 - Update to 140.10.2 ESR 140.10.1-1 - Update to...

The vulnerability of the ASHLAR encoder in the console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-60781

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parse...

installer v13.29.2

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...