Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale

The rise of AI agent frameworks has introduced agent skills, modular packages containing instructions and executable code that dynamically extend agent capabilities. While this architecture enables powerful customization, skills execute with implicit trust and minimal vetting, creating a...

SvelteKit security vulnerabilities

SvelteKit is an open-source web development framework developed in Svelte. Versions 2.49.0 to 2.49.4 of SvelteKit contain security vulnerabilities. These vulnerabilities stem from improper handling of special payloads by experimental form-based remote functions, which may lead to a memory...

Pimcore security vulnerabilities

Pimcore is an open-source web content management platform developed by the Austrian company Pimcore. This platform integrates applications such as web content management, e-commerce frameworks, and product information management. Versions of Pimcore prior to 12.3.1 and 11.5.14 contained security...

Omnispace Agora Project security vulnerabilities

Omnispace Agora Project is a satellite IoT verification project developed by the American company Omnispace. Versions of Omnispace Agora Project prior to version 25.10 contained security vulnerabilities. These vulnerabilities stemmed from defects in the file upload function, which could allow...

GHSA-56H3-78GP-V83R vulnerabilities

Vulnerabilities for packages: druid...

GHSA-X27M-9W8J-5VCW vulnerabilities

Vulnerabilities for packages: druid...

EUVD-2026-2468

In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drmkmshelperpollfini and drmatomichelpershutdown helpers should only be called when the device has been successfully registered. Currently, these functions are called...

GHSA-3W4M-C8RQ-62JJ vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-azure, linux-vmware, linux-qemu...

GHSA-XMGF-J324-J5XQ vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-azure, linux-vmware, linux-qemu...

MiracleLinux 3 : firefox-3.6.26-1.0.1.AXS3, xulrunner-1.9.2.26-1.0.1.AXS3 (AXSA:2012-152:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-152:01 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...

MiracleLinux 3 : vim-7.0.109-4.4z.1AXS3 (AXSA:2008-498:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-498:01 advisory. VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very...

kernel-devel-6.18.5-1.1 on GA media (moderate)

kernel-devel-6.18.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:10039-1 Rating: moderate Cross-References: CVE-2025-68332 CVE-2025-68335 CVE-2025-68336 CVE-2025-68337 CVE-2025-68344 CVE-2025-68345 CVE-2025-68346 CVE-2025-68347 CVE-2025-68348 CVE-2025-68349 CVE-2025-68350 CVE-2025-68351...

mcphost-0.32.0-1.1 on GA media (moderate)

mcphost-0.32.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10042-1 Rating: moderate Cross-References: CVE-2025-47913 CVE-2025-47914 CVE-2025-58181 CVSS scores: CVE-2025-47913 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-47913 SUSE : 8.7...

Debian: Security Advisory (DLA-4436-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 3 : freetype-2.2.1-31.1.0.1.AXS3 (AXSA:2012-508:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-508:01 advisory. The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and...

VLC < 3.0.22 Multiple Vulnerabilities

The version of VLC media player installed on the remote host is prior to 3.0.22. It is, therefore, affected by multiple vulnerabilities. If successful, a malicious third party could trigger a crash of VLC Denial of service. While these issues in themselves are most likely to just crash the...

MiracleLinux 4 : ImageMagick-6.5.4.7-6.AXS4 (AXSA:2012-659:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-659:01 advisory. ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD imag...

MiracleLinux 4 : postgresql-8.4.13-1.0.1.AXS4 (AXSA:2012-987:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-987:03 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselect...

MiracleLinux 3 : kernel-2.6.18-274.3.AXS3 (AXSA:2011-362:08)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-362:08 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

MiracleLinux 3 : kernel-2.6.18-194.2.AXS3 (AXSA:2010-323:11)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-323:11 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...