DEBIAN-CVE-2026-6092

When HAVEENCRYPTTHENMAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC...

DEBIAN-CVE-2026-22879

A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom versions: 9.5.2. A specially crafted DICOM file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-6450

creationtimestamp| type| source ---|---|--- 2026-06-25 22:03:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5golcu3b2a...

CVE-2025-71335

Flowise prior to version 3.0.10 is affected. Versions 3.0.7 and earlier do not invalidate existing sessions or session tokens after a user changes their password, allowing an attacker with an active session (e.g., via a stolen token or an already-logged-in device) to remain authenticated post-pas...

CVE-2025-71328

CVE-2025-71328 affects Flowise before 3.0.10. An authenticated user can change their account password via the Account Settings > Security page without providing the current password or any additional verification, because the application does not enforce a current-password check on credential ...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the GetInstance process. An attacker can access or modify resources belonging to other users by sending requests with their own credentials after another user has initialized the singleton, causing all subsequen...

EUVD-2026-38383

MessagePack-CSharp: DynamicUnionResolver-generated deserializers miss depth enforcement...

CVE-2026-6731

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...

CVE-2017-14883

creationtimestamp| type| source ---|---|--- 2026-06-25 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5djxwqji2a...

CVE-2026-49855 vulnerabilities

Vulnerabilities for packages: mitmproxy...

GHSA-FCHF-WVCC-QF9G vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56405 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-XQW9-F65G-5QXW vulnerabilities

Vulnerabilities for packages: expat...

GHSA-MGF9-4VPG-HJ56 vulnerabilities

Vulnerabilities for packages: mitmproxy...

GHSA-3X9G-8VMP-WQVF vulnerabilities

Vulnerabilities for packages: mitmproxy...

CVE-2017-14881

creationtimestamp| type| source ---|---|--- 2026-06-25 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5bucqyvb2k...

GHSA-68VW-XV3C-52VP vulnerabilities

Vulnerabilities for packages: expat...

GHSA-M2MM-5W64-P8P7 vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56409 vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info

Integer underflow in wcPKCS7DecryptOri when handling crafted Other Recipient Info, leading to incorrect length handling during decryption...