CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10

CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10. A patched version of the package is available...

CVE-2026-23060 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23060 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2025-38232 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-38232 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2025-47911 affecting package containerd2 for versions less than 2.0.0-18

CVE-2025-47911 affecting package containerd2 for versions less than 2.0.0-18. A patched version of the package is available...

CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6

CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...

CVE-2026-23102 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23102 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23025 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23025 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2025-40164 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-40164 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-28421 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28421 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23031 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23031 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2025-0838 affecting package abseil-cpp for versions less than 20240116.0-3

CVE-2025-0838 affecting package abseil-cpp for versions less than 20240116.0-3. A patched version of the package is available...

CVE-2026-23126 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23126 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23180 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23180 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23204 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23204 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2025-68114 affecting package rust for versions less than 1.90.0-4

CVE-2025-68114 affecting package rust for versions less than 1.90.0-4. A patched version of the package is available...

CVE-2026-23089 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23089 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-29174

Craft Commerce is an ecommerce platform for Craft CMS. Prior to 5.5.3, Craft Commerce is vulnerable to SQL Injection in the inventory levels table data endpoint. The sort0direction and sort0sortField parameters are concatenated directly into an addOrderBy clause without any validation or...

CVE-2026-29172

Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, Craft Commerce is vulnerable to SQL Injection in the purchasables table endpoint. The sort parameter is split by | and the first part column name is passed directly as an array key to orderBy without whitelist...

GO-2026-4617 Gogs: Release tag option injection in release deletion in gogs.io/gogs

Gogs: Release tag option injection in release deletion in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please sugge...

DHS Ousts CBP Privacy Officers Who Questioned ‘Illegal’ Orders

Department of Homeland Security leaders removed top privacy officers who objected to mislabeling government records to block their public release, WIRED has learned...