[SECURITY] Fedora 43 Update: libgit2-1.9.6-1.fc43

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

CVE-2026-53573

CVE-2026-53573 affects GeoNetwork core-geonetwork (3.12.0 to 4.2.16 and 4.4.11) where unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter allows an attacker-controlled external redirect after login. Root cause: improper validation ena...

[R1] Stand-alone Security Patch Available for SC Versions 6.6.4, 6.7.5 and 6.8.0 on Tenable Enclave Security: SC202607.2

R1 Stand-alone Security Patch Available for SC Versions 6.6.4, 6.7.5 and 6.8.0 on Tenable Enclave Security: SC202607.2 Jason Schavel Fri, 07/31/2026 - 13:00 Security Center on Tenable Enclave Security leverages third-party software to help provide underlying functionality. Several of the...

GHSA-X83G-979R-F5FH Sylius Mollie Plugin has unauthenticated IDOR that leaks order token and customer PII

Impact Two unauthenticated Mollie shop endpoints look up orders by a sequential integer orderId with no ownership or session check. Chained, they expose customer PII. GET /locale/thank-you PageRedirectController::thankYouAction, route syliusmollieshopthankyoupageredirect loads the order with...

ROOT-OS-DEBIAN-12-CVE-2026-58010 CVE-2026-58010 in rootio-glib2.0 - Patched by Root

Root has patched CVE-2026-58010 in the rootio-glib2.0 package for Root:Debian:12. Multiple fixed versions available...

Fedora 44 : nextcloud (2026-df06189438)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-df06189438 advisory. 34.0.2 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

ROOT-APP-NPM-CVE-2026-54270 CVE-2026-54270 in @rootio/protobufjs - Patched by Root

Root has patched CVE-2026-54270 in the @rootio/protobufjs package for Root:npm. Multiple fixed versions available...

SUSE CVE-2026-48794

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for applications via a web portal. In versions 4.36.0 through 4.39.19, due to lack of canonicalization of domains in very specific edge cases, an access control rule may b...

SUSE CVE-2026-49821

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's buildermgr controller processed Package CRDs without verifying that Package.spec.environment.namespace matched...

ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-49978 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-44185 CVE-2026-44185 in rootio-apache2 - Patched by Root

Root has patched CVE-2026-44185 in the rootio-apache2 package for Root:Debian:13. Multiple fixed versions available...

CLEANSTART-2026-QM89803 Security fixes in victoriametrics-operator-fips 0.65.0-r1

Package victoriametrics-operator-fips version 0.65.0-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-AB32653 Security fixes in istio 1.28.5-r0

Package istio version 1.28.5-r0 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-AR53211 Security fixes in kubernetes-dns-node-cache 1.24.1-r0

Package kubernetes-dns-node-cache version 1.24.1-r0 fixes 2 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf...

GHSA-3JH7-WM29-Q568 veraPDF Validation XXE via Rich Text

Summary Description An XML External Entity Injection CWE-611 vulnerability in veraPDF allows a remote attacker to read arbitrary files on the server file system and perform Server-Side Request Forgery by submitting a crafted PDF containing a malicious rich-text /RC or /RV entry. This affects all...

ROOT-OS-DEBIAN-13-CVE-2026-34980 CVE-2026-34980 in rootio-cups - Patched by Root

Root has patched CVE-2026-34980 in the rootio-cups package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-59529 CVE-2025-59529 in rootio-avahi - Patched by Root

Root has patched CVE-2025-59529 in the rootio-avahi package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2024-52616 CVE-2024-52616 in rootio-avahi - Patched by Root

Root has patched CVE-2024-52616 in the rootio-avahi package for Root:Debian:13. Multiple fixed versions available...

Check Point Gaia Operating System (sk185153)

The remote host is missing a hotfix for the Gaia Operating System. It is, therefore, affected by a vulnerability as referenced in the sk185153 advisory. - A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with roo...

@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution

A SQL injection vulnerability exists in the escapeValue function used for parameter substitution. escapeValue dispatches on the type of the parameter value, and two of its branches failed to escape safely. An attacker who can control a parameter value can terminate the enclosing string literal an...