PT-2026-89714

These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...

redis:6 security update

6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373...

ALSA-2026:66000 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

OPENSUSE-SU-2026:11734-1 perl-Authen-SASL-2.210.0-1.1 on GA media

These are all security issues fixed in the perl-Authen-SASL-2.210.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11733-1 expat-2.8.4-1.1 on GA media

These are all security issues fixed in the expat-2.8.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11730-1 cargo-audit-0.22.2~git0.281452c-3.1 on GA media

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from incorrect pathname restrictions in the catalog. This allows attackers to bypass security restrictions.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions in the catalog. Exploiting this vulnerability can allow an attacker to bypass security restrictions...

ROS-20260909-73-0128

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

preflight v0.22.0

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

GHSA-WMMP-3585-3RMP

creationtimestamp| type| source ---|---|--- 2026-09-08 23:32:32+00:00| seen| https://gist.github.com/alon710/5d16343ca1e4ea17a35c27f6e94b12c6 2026-09-09 00:00:05+00:00| seen| https://gist.github.com/alon710/5d16343ca1e4ea17a35c27f6e94b12c6...

CVE-2026-81725

creationtimestamp| type| source ---|---|--- 2026-09-08 22:36:09+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-8mpw-7fpc-4gqj...

CVE-2026-73558

creationtimestamp| type| source ---|---|--- 2026-09-08 22:36:07+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5...

CVE-2026-83607

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:58+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-w2rr-34g9-rvrj...

CVE-2026-83606

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:56+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-g53g-w8rj-fmg7...

CVE-2026-83614

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:35+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-93r5-fhx6-vmg9...

CVE-2026-83615

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:32+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g...

CVE-2026-83613

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:28+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6...

CVE-2026-83611

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:21+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-6h8r-xr42-gp59...

CVE-2026-87053

A flaw was found in operator-sdk-builder. Due to an oversight in the Containerfile configuration, the final built container image runs with root privileges by default. This increases the attack surface of the container, as any process executed within it will have elevated permissions. If a...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...