CVE-2026-105163

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in crossplane-runtime up to versions 2.2.2 and 2.3.2 . The flaw specifically affects the Get function within the pkg/xpkg/client.go file of the ImageConfig component. This issue may be exploited via a remote attack vector. T...

CVE-2026-105163 crossplane crossplane-runtime ImageConfig client.go Get toctou

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of the component ImageConfig. The manipulation results in time-of-check time-of-use. The attack may be launched remotely. Upgrading to versio...

CVE-2026-105163 crossplane crossplane-runtime ImageConfig client.go Get toctou

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of the component ImageConfig. The manipulation results in time-of-check time-of-use. The attack may be launched remotely. Upgrading to versio...

openclaw

OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an open-source AI assistant that runs on your own computer and meets you in the channels you already use: Discord, iMessage, Slack, Teams, Telegram, WhatsApp, and 20+ more, plus native apps for macOS, iOS, Android, Windows, a...

PT-2026-104649

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of the component ImageConfig. The manipulation results in time-of-check time-of-use. The attack may be launched remotely. Upgrading to versio...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, mcp-grafana, crossplane-provider-gcp-beta-networksecurity-fips, ksops, ucd, cadvisor, commercial-gitlab-workhorse-ee-fips, karpenter-fips, kubedock, kube-router, kubernetes-event-exporter-fips, hydra-fips, consul-fips,...

tracdap-runtime (>=0.9.0rc2, <=0.10.0b2) potentially affected by unknown CVE via dulwich (0.23.2)

dulwich PYPI version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.9.0rc2, =0.10.0b2 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grimoirelab (>=1.9.1rc1, <=1.9.2), infrahub-server (>=1.6.0b0, <=1.8.0b0) +3 more potentially affected by unknown CVE via dulwich (0.22.7)

dulwich PYPI version 0.22.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.1rc1, =1.6.0b0, =0.1.2, =0.36.2, =0.8.0b4, =0.9.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

tracdap-runtime (>=0.5.15, <=0.6.0rc1) potentially affected by unknown CVE via dulwich (0.21.2)

dulwich PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.5.15, =0.6.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

tracdap-runtime (>=0.9.0rc2, <=0.10.0b2) potentially affected by unknown CVE via dulwich (0.23.2)

dulwich PYPI version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.9.0rc2, =0.10.0b2 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

grimoirelab (>=1.9.1rc1, <=1.9.2), infrahub-server (>=1.6.0b0, <=1.8.0b0) +3 more potentially affected by unknown CVE via dulwich (0.22.7)

dulwich PYPI version 0.22.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.1rc1, =1.6.0b0, =0.1.2, =0.36.2, =0.8.0b4, =0.9.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

grimoirelab (>=1.6.0rc1, <=1.7.0), qgis-deployment-toolbelt (>=0.34.5, <=0.36.0) +2 more potentially affected by unknown CVE via dulwich (0.22.1)

dulwich PYPI version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.6.0rc1, =0.34.5, =0.6.0rc3, =0.1.0, =0.3.4 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

tracdap-runtime (>=0.5.15, <=0.6.0rc1) potentially affected by unknown CVE via dulwich (0.21.2)

dulwich PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - tracdap-runtime =0.5.15, =0.6.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents

Workspace agents combine large language models with execution harnesses to perform stateful, multi-step tasks that access or modify external resources. Existing benchmarks leave gaps in executable coverage of their runtime security risks, while evolving model capabilities, harnesses, tools, and...

Persona Guardrail: A Production-Grade Defense Framework for Agentic Systems

Large language model-based agents are increasingly deployed to perform domain-specific tasks by interacting with enterprise knowledge, tools, and external services. Existing runtime guardrails primarily target prompt injection and other attack-specific behaviors under a black-box threat model, bu...

openSUSE 16 Security Update : rclone (openSUSE-SU-2026:21999-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21999-1 advisory. Changes in rclone: - Update to version 1.75.1: boo1279548 - Security - archive - Fix zip slip path traversal in untrusted zip files...

CVE-2026-93832

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

CVE-2026-104057 Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps activePlayers and allConnections in its WebSocket handler, where Wshandler and HandleWebsocketMessages goroutines read and write these maps without a mutex. A remote...

pypdf: Possible long runtimes with large amount of embedded files

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing the embedded files through the dictionary-based API. PatchesThis has been fixed in pypdf==6.19.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from PR 4081...

PYSEC-2026-4159 pypdf: Possible long runtimes with large amount of embedded files

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing the embedded files through the dictionary-based API. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4081...