EUVD-2026-46244

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153...

CVE-2026-16392

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16379

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16372

Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16350 Incorrect boundary conditions in the Audio/Video: cubeb component

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

DEBIAN-CVE-2026-59843

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...

ROOT-APP-NPM-CVE-2026-47208 CVE-2026-47208 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-47208 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24781 CVE-2026-24781 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-24781 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44002 CVE-2026-44002 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-44002 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-64627

Parse Server versions 9.0.0–8.6.84/9.0.0–9.10.0-alpha.3 contain a schema disclosure vulnerability where, when GraphQL public introspection is disabled, error messages during variable coercion reveal hidden schema identifiers (e.g., Cloud Code function names, Parse class/field names) to an unauthe...

Authorization Bypass

Snipe-IT is vulnerable to Authorization Bypass. The vulnerability is due to inadequate authorization checks, where UsersController::show and printInventory authorize only user viewing before loading and rendering assigned license, accessory, and consumable relationships, and an authenticated user...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the SFTP read process. An attacker can cause excessive memory allocation and exhaust system resources by sending repeated requests with arbitrarily large lengths. Remediation A fix was...

CLEANSTART-2026-QS59444 Security fixes for CVE-2026-42504 applied in versions: 0.20.7-r3

Security vulnerability affects the ollama-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DK91376 Security fixes for CVE-2026-42504 applied in versions: 3.31.4-r3

Security vulnerability affects the calico package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JR72966 Security fixes for CVE-2026-42504 applied in versions: 2.5.15-r2

Security vulnerability affects the fabric-peer package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IB56593 Security fixes for CVE-2026-42504 applied in versions: 9.3.4-r3

Security vulnerability affects the elastic-beats package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-15692

creationtimestamp| type| source ---|---|--- 2026-07-21 08:58:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gxcsqi62h...

CLEANSTART-2026-XP63957 Security fixes for CVE-2026-42504 applied in versions: 1.76.1-r0

Security vulnerability affects the newrelic-infrastructure-agent package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OS58683 Security fixes for CVE-2026-42504 applied in versions: 3.11.3-r2

Security vulnerability affects the prometheus package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DV05833 Security fixes for CVE-2026-42504 applied in versions: 2.21.0-r0

Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...