SUSE CVE-2026-43437

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream runtime in sndpcmdrain In the drain loop, the local variable 'runtime' is reassigned to a linked stream's runtime runtime = s-runtime at line 2157. After releasing the stream lock at...

SUSE CVE-2026-43446

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend callback drains the running job workqueue before suspending the device. If a job is still executing and calls pmruntimeresumeandget, it can...

Memory Forensics Techniques for Automated Detection and Analysis of Go Malware

The Go programming language has become increasingly popular among malware developers due to its ability to produce statically linked, cross-platform executables that challenge traditional analysis techniques. These binaries embed a substantial runtime and compiler-generated metadata and are...

PT-2026-61488

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime power management PM reference leak occurs in the tegra i2c driver. When the tegra i2c mutex lock function fails, the system returns without executing pm runtime put, which fail...

PT-2026-40723

Name of the Vulnerable Software and Affected Versions LangSmith SDK Python versions prior to 0.8.0 LangSmith SDK JS/TS versions prior to 0.6.0 Description The prompt pull methods pull prompt and pull prompt commit in Python, and pullPrompt and pullPromptCommit in JS/TS, fetch and deserialize prom...

CVE-2026-44458: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, the JSX renderer escapes style attribute object values for HTML but not for CSS. Untrusted input in a style object value or property name can therefore inject additional CSS declarations into t...

Linux Distros Unpatched Vulnerability : CVE-2026-43323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zerovruntime tracking fix John reported that stress-ng-yield could make his...

Linux Distros Unpatched Vulnerability : CVE-2026-43446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend...

PYSEC-2026-145

vLLM is an inference and serving engine for large language models LLMs. From to before 0.20.0, the extracthiddenstates speculative decoding proposer in vLLM returns a tensor with an incorrect shape after the first decode step, causing a RuntimeError that crashes the EngineCore process. The crash ...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper validation of user-supplied input in the authentication process. An attacker can gain elevated privileges by providing crafted input during local interaction. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper validation of user-supplied input in the authentication process. An attacker can gain elevated privileges by providing crafted input during local interaction. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper validation of user-supplied input in the authentication process. An attacker can gain elevated privileges by providing crafted input during local interaction. Remediation Upgrade...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-43515 Source advisory...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-42498 Source advisory...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-41284 Source advisory...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-43514 Source advisory...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-43513 Source advisory...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3) potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (7.0.54)

org.apache.tomcat:tomcat MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - io.fabric8.runtime:fabric-runtime-container-tomcat-patch 1.1.0.cr3 Source cves: CVE-2026-43512 Source advisory...