[SECURITY] Fedora 43 Update: erlang-gun-2.4.1-1.fc43

Erlang HTTP client with support for HTTP/1.1, HTTP/2, Websocket and more...

Fedora 44 : kubernetes1.33 (2026-da02662d41)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-da02662d41 advisory. - Update to release 1.33.13 - Resolves: rhbz2467604 - Upstream fix Tenable has extracted the preceding description block directly from the Fedora security...

PT-2026-51253

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK versions prior to 3.7.1 Description A heap-based buffer overflow can occur in the XMLNode::parseFile function within the ofstd/libsrc/ofxml.cc library. This issue allows a remote attacker to execute a manipulation that leads to the...

[SECURITY] Fedora 43 Update: perl-Config-IniFiles-3.001000-1.fc43

Config::IniFiles provides a way to have readable configuration files outside your Perl script. Configurations can be imported inherited, stacked,..., sections can be grouped, and settings can be accessed from a tied hash...

SUSE SLES15 Security Update : helm (SUSE-SU-2026:2439-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2439-1 advisory. This update for helm rebuilds it against the current go security release. Tenable has extracted the preceding description block directly fro...

SUSE SLES15 Security Update : containerized-data-importer (SUSE-SU-2026:2407-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2407-1 advisory. This update for containerized-data-importer rebuilds the current sources against latest go security release and the images against the lates...

SUSE SLES15 Security Update : buildah (SUSE-SU-2026:2415-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2415-1 advisory. This update for buildah rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...

SUSE SLES15 Security Update : rootlesskit (SUSE-SU-2026:2452-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2452-1 advisory. This update for rootlesskit rebuilds it against the current go security release. Tenable has extracted the preceding description block...

SUSE SLES15 Security Update : rootlesskit (SUSE-SU-2026:2451-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2451-1 advisory. This update for rootlesskit rebuilds it against the current go security release. Tenable has extracted the preceding description block...

SUSE SLES15 Security Update : kubevirt-1.6 (SUSE-SU-2026:2401-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2401-1 advisory. This update for kubevirt-1.6 fixes the following issues Update to version 1.6.6, fixes various go embedded security issues: -...

Photon OS 5.0: Dotnet PHSA-2026-5.0-0884

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0884. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

anki-release (>=25.6.0b2, <=25.9.2) potentially affected by CVE-2026-59153 via aqt (>=25.6.0b2, <=25.9.2)

aqt PYPI version =25.6.0b2, =25.6.0b2, =25.9.2 Source cves: CVE-2026-59153 Source advisory: SNYK:PYTHON-AQT-17675230...

anki-release (>=25.6.0b2, <=25.9.2) potentially affected by CVE-2026-59153 via aqt (>=25.6.0b2, <=25.9.2)

aqt PYPI version =25.6.0b2, =25.6.0b2, =25.9.2 Source cves: CVE-2026-59153 Source advisory: GHSA-869J-R97X-HX2G...

anki-release (>=25.6.0b2, <=25.9.2) potentially affected by CVE-2026-59153 via aqt (>=25.6.0b2, <=25.9.2)

aqt PYPI version =25.6.0b2, =25.6.0b2, =25.9.2 Source cves: CVE-2026-59153 Source advisory: OSV:GHSA-869J-R97X-HX2G...

anki-release (>=25.6.0b2, <=25.9.3) potentially affected by unknown CVE via aqt (>=25.6.0b2, <=25.9.3)

aqt PYPI version =25.6.0b2, =25.6.0b2, =25.9.3 Source cves: unknown CVE Source advisory: GHSA-CW6H-FFMH-X6VH...

anki-release (>=25.6.0b2, <=25.9.3) potentially affected by CVE-2026-58266 via aqt (>=25.6.0b2, <=25.9.3)

aqt PYPI version =25.6.0b2, =25.6.0b2, =25.9.3 Source cves: CVE-2026-58266 Source advisory: OSV:GHSA-CW6H-FFMH-X6VH...

anki-release (>=25.6.0b2, <=25.9.3) potentially affected by CVE-2026-58266 via aqt (>=25.6.0b2, <=25.9.3)

aqt PYPI version =25.6.0b2, =25.6.0b2, =25.9.3 Source cves: CVE-2026-58266 Source advisory: SNYK:PYTHON-AQT-17675231...

Improper Locking

Overview Affected versions of this package are vulnerable to Improper Locking in the releasewritelock and releasereadlock functions. An attacker can disrupt synchronization guarantees and exploit data races or cause denial of service by invoking these functions from unauthorized threads or withou...

CVE-2026-50559

Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.4.1, 3.27.5, and 3.20.6.2, Quarkus HTTP path-based authorization policies can be bypassed using encoded semicolons %3B to smuggle matrix parameters past the security layer,...

CVE-2026-49344

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, Mercator's Query Engine /admin/queries/execute accepts a JSON DSL from / select / filters / traverse / output, translates it into an Eloquent query, and returns results as JSON...