Linux Kernel Security Vulnerabilities

The Linux kernel versions from 5.3 to 7.3-rc1 contain security vulnerabilities. These vulnerabilities stem from improper lifecycle management of virtiopmem request tokens. The virtiopmemhostack function wakes up requests that have been released by the submitter, but the request tokens can still b...

CVE-2026-15603 morgan vulnerable to Log Forging via unescaped Unicode line separators

morgan is an HTTP request logger middleware for Node.js. In versions prior to 1.12.0, the internal helper that escapes log token values did not neutralize the Unicode line separator characters U+0085 Next Line, U+2028 Line Separator, and U+2029 Paragraph Separator. An unauthenticated remote clien...

PT-2026-63614

The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...