Security update for papers (important)

openSUSE security update: security update for papers ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21106-1 Rating: important References: bsc1261947 bsc1265880 Cross-References: CVE-2026-46529 CVSS scores: CVE-2026-46529 SUSE : 7...

PT-2026-53839

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Broker versions prior to 5.19.8 Apache ActiveMQ Broker versions 6.0.0 through 6.2.6 Apache ActiveMQ versions prior to 5.19.8 Apache ActiveMQ versions 6.0.0 through 6.2.6 Apache ActiveMQ All versions prior to 5.19.8 Apache...

The vulnerability of the Apache APISIX cloud API gateway lies in the redirection of URLs to an unreliable website, allowing a hacker to redirect users to any given URL address.

The vulnerability of the Apache APISIX cloud API gateway involves redirecting URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-11998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution...

RHEL 8 : ruby:2.5 (RHSA-2026:33514)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33514 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

Security update for gleam (moderate)

openSUSE security update: security update for gleam ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21143-1 Rating: moderate References: bsc1267396 bsc1267397 bsc1267398 Cross-References: CVE-2026-32685 CVE-2026-42795 CVE-2026-43965 Affected Product...

CVE-2026-7656

creationtimestamp| type| source ---|---|--- 2026-06-29 23:57:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphowclzrx2y 2026-06-30 00:01:40+00:00| seen| https://gist.github.com/ichintu/8b78df900d5aca0afc4dd97225bd83dc 2026-06-30 01:15:37+00:00| seen|...

CVE-2026-43663

creationtimestamp| type| source ---|---|--- 2026-06-29 23:41:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnzlvy332q 2026-06-30 21:18:11+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3mpjwienisy2d 2026-07-01 02:51:13+00:00| seen|...

GHSA-Q2M9-6JP9-C6MC Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query

Summary The checkUserPassword GraphQL query in Dgraph is vulnerable to DQL Dgraph Query Language injection. User-supplied password values are interpolated directly into a DQL checkpwd query via fmt.Sprintf without any escaping or parameterization. An attacker can inject a password containing a...

CVE-2026-43743

creationtimestamp| type| source ---|---|--- 2026-06-29 22:19:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjgmo4ok25 2026-07-01 02:50:35+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:58+00:00| seen|...

CVE-2026-57997

Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, allowing acceptance of HS384 and HS512 tokens alongside HS256. Attackers possessing the jwtSecret can mint tokens with non-standard HMAC variants to bypass...

CVE-2026-53404

creationtimestamp| type| source ---|---|--- 2026-06-29 22:15:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjaa6jki2d 2026-06-29 23:23:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphmzpmaux2o 2026-06-29 23:31:20+00:00| seen|...

CVE-2026-13757

creationtimestamp| type| source ---|---|--- 2026-06-29 21:58:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphibxmbru2b 2026-07-11 17:28:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqf6ryg7t42s 2026-07-13 07:00:02+00:00| seen|...

CVE-2026-12672

creationtimestamp| type| source ---|---|--- 2026-06-29 20:25:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphd3qywhk22...

GHSA-9GGV-8W38-R7PM vulnerabilities

Vulnerabilities for packages: redisinsight...

CVE-2026-37637

An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component...

CVE-2026-43701

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox...

CVE-2026-43712

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-43663

A memory-handling vulnerability in WebKit allows an attacker to cause an unexpected process crash by processing maliciously crafted web content. This issue is fixed in Safari 26.5.2 , iOS 26.5.2 (and iOS 18.7.10 ), iPadOS 26.5.2 (and iPadOS 18.7.10 ), macOS Tahoe 26.5.2 , tvOS 26.6 , visionOS 26....

CVE-2026-43713

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data...