Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: – Parsing the DT Device Tree for flashes along with the rest of the DT parsing. The recent refactoring of the code responsible for enabling runtime PM was implemented in the commit f1eb4e792bb1 „spi:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: “hungtask”: fixed warnings caused by unaligned lock pointers. The blocker tracking mechanism assumes that lock pointers are at least 4-byte aligned, so that their lower bits can be used for type encoding. However, as reported by...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: soundwire: bus: Fix unbalanced pmruntimeput causing usage count underflow This issue is addressed by the commit 443a98e649b4 “soundwire: bus: use pmruntimeresumeandget”. The calls to pmruntimeresumeandget are changed back to...

RLSA-2026:19178 Moderate: crun security update

crun is a OCI runtime Security Fixes: crun: crun: Privilege escalation due to incorrect parsing of the --user option CVE-2026-30892 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the...

PT-2026-42180

Name of the Vulnerable Software and Affected Versions phenixdigital phoenix storybook versions 0.2.0 through 1.0.x Description An unauthenticated denial-of-service can occur via BEAM atom table exhaustion. Multiple LiveView event handlers convert user-supplied event parameter strings to atoms usi...

PT-2026-42368

Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this ...

Amazon Linux 2023 : firewalld, firewalld-filesystem, firewalld-test (ALAS2023-2026-1636)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1636 advisory. A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This...

Malicious code in openirf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb17f2c97bd5a4cabcb86b5a51c9639749048f9675b6fa1d881e66d4d8b02958 pyproject.toml lists tdqm as a runtime dependency alongside numpy, scipy, and matplotlib. The package's source code imports tqdm the legitimate...

Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string

Summary dasel's selector lexer panics with an index-out-of-range error when tokenizing a quoted string that ends with a trailing backslash e.g., "\ or '. A 2-byte input causes an immediate process crash via Go runtime panic. I confirmed the issue on v3.3.1 fba653c7f248aff10f2b89fca93929b64707dfc8...

CVE-2026-45243

Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unauthorized operations on automation artifacts. Attackers can simulate runtime messages with spoofed sender identifiers to list, read,...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.10), com.squareup.wire:wire-schema (4.0.0-alpha.10) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.10)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.10 - com.squareup.wire:wire-schema...

at.released.igdbclient:igdbclient-core-android (0.8), at.released.igdbclient:igdbclient-core-jvm (0.8) +21 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.3.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - at.released.igdbclient:igdbclient-core-android 0.8 -...

com.squareup.misk:misk (>=2025.06.03.182934-790a8b3, <=2025.06.05.100657-d32f88d), com.squareup.misk:misk-admin (>=2025.06.03.182934-790a8b3, <=2025.06.05.100657-d32f88d) +19 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.3.2)

com.squareup.wire:wire-runtime MAVEN version 5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =2025.06.03.182934-790a8b3, =2025.06.03.182934-790a8b3,...

com.squareup.wire:proto-pruner (3.0.0-rc02), com.squareup.wire:wire-codegen-sample (3.0.0-rc02) +11 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.0.0-rc02)

com.squareup.wire:wire-runtime MAVEN version 3.0.0-rc02 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:proto-pruner 3.0.0-rc02 - com.squareup.wire:wire-codegen-sample 3.0.0-rc02 -...

com.squareup.wire:wire-grpc-client-jvm (4.0.0-alpha.9), com.squareup.wire:wire-reflector-jvm (4.0.0-alpha.9) +1 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.0.0-alpha.9)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.0.0-alpha.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:wire-grpc-client-jvm 4.0.0-alpha.9 -...

com.squareup.wire:wire-compiler (1.0.0), com.squareup.wire:wire-gson-support (1.0.0) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (1.0.0)

com.squareup.wire:wire-runtime MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.0.0 - com.squareup.wire:wire-gson-support 1.0.0 Source cves:...

at.released.igdbclient:igdbclient-core (0.8), at.released.igdbclient:igdbclient-ktor (0.8) +5 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.3.0)

com.squareup.wire:wire-runtime MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - at.released.igdbclient:igdbclient-core 0.8 - at.released.igdbclient:igdbclient-ktor 0.8 -...

app.cash.backfila:backfila-embedded (>=2025.07.28.193750-99c8949, <=2026.05.12.181610-d5945c8), app.cash.backfila:client (>=2025.07.28.193750-99c8949, <=2026.05.12.181610-d5945c8) +77 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.3.5)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - app.cash.backfila:backfila-embedded =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949,...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.5.0), com.squareup.wire:wire-compiler (4.5.0) +18 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.5.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.5.0 - com.squareup.wire:wire-compiler...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.9.7), com.squareup.wire:wire-compiler (4.9.7) +23 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.9.7)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.9.7 - com.squareup.wire:wire-compiler...