ROOT-OS-DEBIAN-13-CVE-2026-31483 CVE-2026-31483 in linux - Patched by Root

Root has patched CVE-2026-31483 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-38514 CVE-2025-38514 in linux - Patched by Root

Root has patched CVE-2025-38514 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-38535 CVE-2025-38535 in linux - Patched by Root

Root has patched CVE-2025-38535 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-38507 CVE-2025-38507 in linux - Patched by Root

Root has patched CVE-2025-38507 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23362 CVE-2026-23362 in linux - Patched by Root

Root has patched CVE-2026-23362 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-52975 CVE-2026-52975 in linux - Patched by Root

Root has patched CVE-2026-52975 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-64076 CVE-2026-64076 in linux - Patched by Root

Root has patched CVE-2026-64076 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-38623 CVE-2025-38623 in linux - Patched by Root

Root has patched CVE-2025-38623 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-43197 CVE-2026-43197 in linux - Patched by Root

Root has patched CVE-2026-43197 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40147 CVE-2025-40147 in linux - Patched by Root

Root has patched CVE-2025-40147 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-39695 CVE-2025-39695 in linux - Patched by Root

Root has patched CVE-2025-39695 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-39716 CVE-2025-39716 in linux - Patched by Root

Root has patched CVE-2025-39716 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68203 CVE-2025-68203 in linux - Patched by Root

Root has patched CVE-2025-68203 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31546 CVE-2026-31546 in linux - Patched by Root

Root has patched CVE-2026-31546 in the linux package for Root:Debian:13. Multiple fixed versions available...

GHSA-3RRR-JR9J-H3Q3 Mermaid Architecture diagrams are vulnerable to prototype pollution

Rendering an untrusted architecture-beta diagram lets the diagram author write an arbitrary property with the value horizontal or vertical onto Object.prototype. A group id of proto is accepted as a valid parent. Impact Any code in the same realm that reads a property of that name from an arbitra...

Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Template

Impact The default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients Patches This has been fixed in 5.74.3 and 6.24.2...

CVE-2026-64662

Summary of CVE-2026-64662 (Statamic) : Statamic, a Laravel and Git powered CMS, had an issue where an authenticated Control Panel user could view content from entries they were not permitted to view, including entry content and custom field values, across any collection and including unpublished ...

Statamic: Account takeover via OAuth email matching without email-verification check

Impact When OAuth login is enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user — potentially including a super admin — without their password. Exploitation requires OAuth to be explicitly enabled with such a...

Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence

Impact An authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belongs to an existing user, without having permission to view users. The endpoint only exposed user existence, not any of its data. Patches This has been...

Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth

Summary There is a high severity vulnerability in Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares. The fix for CVE-2026-33433 stripped canonical-cased spoofed identity headers e.g. X-Auth-User before writing Traefik's own value, but did not account for underscore-variant header names...