RHSA-2026:51146 Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - aom

Bulletin has no description...

RHSA-2026:51100 Red Hat Security Advisory: RHEL AI 3.3 RPM runtime CVE fix - aom

Bulletin has no description...

stackrox v4.9.11-rc.1

Table of Contents StackRox Kubernetes Security Platform Table of Contents Community Deploying StackRox Quick Installation using Helm Manual Installation using Helm Installation using the Operator Installation via Scripts Kubernetes Distributions EKS, AKS, GKE OpenShift Docker Desktop, Colima, or...

Apache Portable Runtime Utility: apr-util XML stack recursion crash

...

prismor v1.38.1

Prismor Runtime security hooks for Claude Code, Codex, and other AI coding agents. Prismor can also be used in observe mode to see agent session activity and dangerous actions in a local self-serve dashboard Website • Onboard with Skill !Trae / Trae CNht...

CVE-2026-19079

CVE-2026-19079 affects policycoreutils’ fixfiles script, where a TOCTOU race during relabel/restore allows a local attacker to swap directory components with symlinks and have chcon follow the link to label arbitrary files (e.g., /etc/shadow). The issue arises from using find to locate unlabeled ...

[SECURITY] Fedora 43 Update: libXfont2-2.0.9-1.fc43

X.Org X11 libXfont2 runtime library...

CVE-2026-50540: Improper Input Validation

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated configuration path annotation. The runtime accepts an...

CVE-2026-47243: Improper Limitation of a Pathname to a Restricted Directory

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to 3.31.0, the runtime-rs standalone virtio-fs path is vulnerable to a guest-root to host-root escape. In this configuration, Kata runs the host...

PT-2026-69116

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.15.0 Description A crafted PDF can cause long runtimes and large memory consumption during text extraction. This occurs when the Font. collect cid character widths function in pypdf/ font.py expands unusually large CI...

Linux Distros Unpatched Vulnerability : CVE-2026-34501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through...

Linux Distros Unpatched Vulnerability : CVE-2026-34191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider...

RHEL 9 : RHEL AI 3.6 RPM runtime CVE fix - thrift (Important) (RHSA-2026:51358)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51358 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

ironclaw ironclaw-v1.1.0

IronClaw Your secure personal AI assistant, always on your side English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn is the standalone runtime on the reborn-integration...

[SECURITY] Fedora 44 Update: libXfont2-2.0.9-1.fc44

X.Org X11 libXfont2 runtime library...

CVE-2026-53977

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middleware in the Express route handler...

Malicious code in @addai/entity-runtime (npm)

Source: amazon-inspector 248d92bb0f9ac7a066bb69c3f3ecea88241e5dd35ea1b61393896c88c07b0856 The package runs a daemon that polls a hardcoded Supabase project syhzpqqvrplaqdipcymw.supabase.co via the RPC runtimepicknextrequest for remote-supplied job rows and spawns Claude Code / Codex / Kimi / Gemi...

Malicious code in @holocronlab/botruntime-runtime (npm)

Source: amazon-inspector ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33 The package is published as a runtime for 'brt-built botruntime agents' and its client.d.ts describes the exported client as 'the authenticated Botpress client'. Bundled entrypoints dist/library.js,...

@holocronlab/botruntime-adk (>=2.0.10, <=2.9.7), @holocronlab/brt (>=0.5.8, <=0.12.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.9.7)

@holocronlab/botruntime-runtime NPM version 2.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk =2.0.10, =0.5.8, =0.12.3 Source cves: unknown CVE Source advisory:...

@holocronlab/botruntime-adk (2.6.3), @holocronlab/brt (0.9.7) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.3)

@holocronlab/botruntime-runtime NPM version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.3 - @holocronlab/brt 0.9.7 Source cves: unknown CVE Source advisory...