31906 matches found
Photon OS 5.0: E2Fsprogs PHSA-2023-5.0-91-0165
An update of the e2fsprogs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0165. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Nghttp2 PHSA-2023-5.0-91-0126
An update of the nghttp2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0126. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Elfutils PHSA-2025-5.0-90-0488
An update of the elfutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0488. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Ghost: Member existence leak via magic link sign-in response
Impact A discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacker to determine whether a given email address belongs to a registered member of a Ghost site. Vulnerable versions This vulnerability is present in Ghost from v5.18.0 up to v6.21.0...
Ghost: Cross-Site Scripting in Universal Import
Impact The Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. Vulnerable versions This vulnerability is present in Ghost from v5.26.0 up to v6.54.0. Patches v6.54.1 contains a fix for this issue. How to update For self-hosters...
ROOT-APP-NPM-CVE-2026-3449 CVE-2026-3449 in @tootallnate/once - Patched by Root
Root has patched CVE-2026-3449 in the @tootallnate/once package for Root:npm. Multiple fixed versions available...
CLSA-2026-1785291650 TuxCare security update for axios (2 CVEs)
TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.24.0-tuxcare.4...
CLSA-2026-1785291369 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.2.15-tuxcare.2...
CLSA-2026-1785380788 TuxCare security update for protobufjs (4 CVEs)
TuxCare rebuilt protobufjs to address 4 CVEs. Fixed in 1.5.1-tuxcare.1...
CLSA-2026-1785117460 TuxCare security update for tmp (1 CVE)
TuxCare rebuilt tmp to address 1 CVE. Fixed in 0.0.24-tuxcare.3...
CLSA-2026-1785204340 TuxCare security update for tmp (1 CVE)
TuxCare rebuilt tmp to address 1 CVE. Fixed in 0.1.0-tuxcare.3...
CLSA-2026-1784856450 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.5.6-tuxcare.3...
CLSA-2026-1784856415 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.3-tuxcare.6...
CLSA-2026-1784856428 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 1.7.5-tuxcare.3...
CLSA-2026-1784769620 TuxCare security update for svelte (1 CVE)
TuxCare rebuilt svelte to address 1 CVE. Fixed in 0.3.0-tuxcare.2...
CLSA-2026-1784683088 TuxCare security update for 152 packages (1 CVE)
TuxCare rebuilt 152 packages to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1784682758 TuxCare security update for lodash.template (1 CVE)
TuxCare rebuilt lodash.template to address 1 CVE. Fixed in 4.4.0-tuxcare.1...
CLSA-2026-1784596308 TuxCare security update for morgan (1 CVE)
TuxCare rebuilt morgan to address 1 CVE. Fixed in 1.6.1-tuxcare.1...