CVE-2026-53275 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53275 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53314 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53314 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53006 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53006 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42502 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5

CVE-2026-42502 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5. A patched version of the package is available...

CVE-2026-25681 affecting package cf-cli for versions less than 8.7.11-7

CVE-2026-25681 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...

CVE-2026-53080 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53080 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53094 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53094 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-52931 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52931 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56406 affecting package expat for versions less than 2.8.2-1

CVE-2026-56406 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53183 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53183 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-52919 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52919 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56132 affecting package expat for versions less than 2.8.2-1

CVE-2026-56132 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56408 affecting package expat for versions less than 2.8.2-1

CVE-2026-56408 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-48617 affecting package nodejs for versions less than 24.17.0-1

CVE-2026-48617 affecting package nodejs for versions less than 24.17.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53128 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53128 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53236 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53236 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59887

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test and .match can be invoked at every mailto: occurrence and scan the remaining input through srcemailname in lib/re.mjs, causing On^2 CPU consumption on crafted user text...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

CVE-2026-59882 guzzlehttp/psr7: Host Confusion via Weak URI Host Validation

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost does not reject URI host components containing authority delimiters, embedded ports, or malformed IPv6 brackets, allowing Uri::getHost to disagree with the URI authority used for security ...

CVE-2026-59873

CVE-2026-59873 affects node-tar (Node.js) prior to v7.5.19. The issue arises because the library did not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction/parsing code (e.g., src/extract.ts), enabling a crafted gzip input to cause resource ex...