Astra Linux – Vulnerability in docker.io-app

Docker Compose relies on the path information embedded in remote OCI Compose artifacts. When a layer includes the annotations com.dockercompose.extends or com.dockercompose.envfile, Compose incorporates the value provided by the attacker from com.dockercompose.file/com.dockercompose.envfile into...

Astra Linux – Vulnerability in binutils

A vulnerability has been discovered in GNU Binutils 2.45. The affected element is the function elfswapshdr in the bfd/elfcode.h library of the Linker component. Manipulation of this function leads to a heap-based buffer overflow. This attack must be carried out locally. The exploit has been...

Astra Linux – Vulnerability in unbound

Unbound before version 1.9.5 allows an out-of-bounds write access in sldnsbgettokenpar. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...

CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...

CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...

CVE-2026-100351

The kin-openapi Go project (versions 0.144.0 through 0.147.0 ) contains a security requirement bypass in the openapi3filter.ValidationHandler . The vulnerability stems from an interpretation conflict: the handler validates operations based on the decoded URL.Path , while a downstream gorilla/mux ...

CLSA-2026-1792079338 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 21 org.springframework.security packages to address 2 CVEs. Fixed in 5.8.16-tuxcare.16...

CLSA-2026-1792078146 TuxCare security update for org.springframework.amqp (3 CVEs)

TuxCare rebuilt 5 org.springframework.amqp packages to address 3 CVEs. Fixed in 2.3.16-tuxcare.2...

CLSA-2026-1792078119 TuxCare security update for org.springframework.amqp (4 CVEs)

TuxCare rebuilt 7 org.springframework.amqp packages to address 4 CVEs. Fixed in 3.1.12-tuxcare.7...

ROOT-APP-MAVEN-CVE-2021-22112 CVE-2021-22112 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2021-22112 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-22978 CVE-2022-22978 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2022-22978 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38821 CVE-2024-38821 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2024-38821 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22732 CVE-2026-22732 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2026-22732 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

CLSA-2026-1792077802 TuxCare security update for org.springframework.amqp (3 CVEs)

TuxCare rebuilt 6 org.springframework.amqp packages to address 3 CVEs. Fixed in 2.4.4-tuxcare.1...

CLSA-2026-1792077209 TuxCare security update for org.springframework.security (3 CVEs)

TuxCare rebuilt 19 org.springframework.security packages to address 3 CVEs. Fixed in 6.2.7-tuxcare.7...

CLSA-2026-1792077066 TuxCare security update for org.springframework.security (8 CVEs)

TuxCare rebuilt 18 org.springframework.security packages to address 8 CVEs. Fixed in 6.0.8-tuxcare.4...

hackingtool

AI-guided, all-in-one toolkit for authorized security testing 219 curated tools across 21 categories — recon, OSINT, web, wireless, phishing, forensics, post-exploitation and more — with an AI layer that turns plain English into the right tool and the exact command. Built for penetration testers ...

CLSA-2026-1792073875 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 19 org.springframework.security packages to address 2 CVEs. Fixed in 6.3.10-tuxcare.20...

Update Chrome: Google fixes 37 security flaws, including seven critical bugs

On October 13 and 14, Google issued several Chrome updates. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 for Linux. The update includes 37 security fixes, including seven rated Critical. On the same...