Malicious code in wandscal (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandhgx (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tryf2zz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swlicap7a (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sprox-c160-1fossil (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slx55008 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slnsq09 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in skytestpluginsdf (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oaklfwk5 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mvv6 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8079 Malicious code in m8405v1rjo (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lp489 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lambproxy2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in enc30716 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1033 TensorFlow vulnerable to integer overflow in math ops

Impact When RangeSize receives values that do not fit into an int64t, it crashes. cpp auto size = std::isintegral::value ? Eigen::numext::abslimit - start + Eigen::numext::absdelta - T1 / Eigen::numext::absdelta : Eigen::numext::ceil Eigen::numext::abslimit - start / delta; // This check does not...

SUSE-SU-2026:22544-1 Security update for haproxy

This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgiconn structure's drl field that allows buffer misparse as new FCGI record headers bsc1268557. - CVE-2026-55204: null pointer dereference...

CVE-2026-34037 Cross-Tenant Resource Cloning via Broken Object-Level Authorization in cloneTo()

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the cloneTo Livewire action in ResourceOperations.php authorizes the source resource but resolves destination resources with unscoped Eloquent lookups, allowing an...

EUVD-2026-41996

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the cloneTo Livewire action in ResourceOperations.php authorizes the source resource but resolves destination resources with unscoped Eloquent lookups, allowing an...

SUSE CVE-2026-13910

Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-53877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. django.contrib.gis.gdal.GDALRaster over-reads its in-memory buffer when constructed fr...