1487018 matches found
PT-2026-102129
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101517
Security vulnerability affects the azure-functions-node package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101597
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-54147: Use of a Broken or Risky Cryptographic Algorithm
http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-security-digest ignores its configured algorithm parameter and verifies every Digest response with hardcoded MD5. Deployments configured for SHA-256 therefor...
CVE-2026-87743: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normalized between the security matcher and HTTP request dispatchers. This allows the attacker to craft a URL that the security matcher considers public, but which is then routed to a...
CVE-2026-84084: Cross-Site Request Forgery (CSRF)
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery CSRF vulnerability...
CVE-2026-84075: Missing Authentication for Critical Function
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...
tomcat9 security update
1:9.0.120-1 - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219582 Tomcat9: Insufficient documentation for EncryptInterceptor may lea...
PT-2026-101050
Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101714
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100282
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-77239: Improper Authorization
WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...
CVE-2024-38639: Improper Authentication
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
PT-2026-102173
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100814
Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100890
Security vulnerability affects the python3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101062
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100341
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...