1494113 matches found
CLSA-2026-1792057279 TuxCare security update for io.projectreactor (2 CVEs)
TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.5.14-tuxcare.1...
ai.covia:covia-claude-code (>=0.9.3, <=0.9.11), ai.covia:covia-discord (>=0.9.4, <=0.9.11) +2077 more potentially affected by CVE-2026-19863 via org.eclipse.jetty:jetty-security (>=12.1.0, <=12.1.12)
org.eclipse.jetty:jetty-security MAVEN version =12.1.0, =0.9.3, =0.9.4, =0.9.7, =0.8.0, =0.9.9, =0.9.6, =0.6.0, =0.9.3, =0.9.9, =0.4.0, =0.4.0, =0.1.7, =4.13.5, =4.9.0, =4.9.3 and more Source cves: CVE-2026-19863 Source advisory: MEND:CVE-2026-19863...
EUVD-2026-101985
An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...
EUVD-2026-101984
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...
CVE-2026-53882 Path Traversal in Virtualization Station VM Import
An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...
CVE-2026-34014
A vulnerability exists in Download Station due to an incorrect permission assignment for the critical resource ds-move-files.sh, which is both writable and executed as root . A local attacker who has gained an administrator account can exploit this to compromise the security of the system. The vu...
EUVD-2026-101975
An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...
CVE-2026-34014 ds-move-files.sh is writable and executed as root
An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
DEBIAN-CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
EUVD-2026-101954
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty, across various versions of "jetty-annotations", and "jetty-eeN-annotations", the Jakarta Spec authoritative url-pattern rules for mixed "@ServletSecurity" annotation, and "web.xml" defined "security-constraint" on the same "url-pattern" were not being applied if the "web.xml" ha...
CVE-2026-18661
In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...
CVE-2026-18661
In Eclipse Jetty , specifically within the jetty-annotations and jetty-eeN-annotations components, a vulnerability exists where Jakarta Spec authoritative url-pattern rules are not correctly applied. This occurs when there is a mix of @ServletSecurity annotations and web.xml defined security-cons...
CLSA-2026-1792053312 TuxCare security update for io.opentelemetry (1 CVE)
TuxCare rebuilt 25 io.opentelemetry packages to address 1 CVE. Fixed in 1.29.0-tuxcare.1...
CLSA-2026-1792050076 TuxCare security update for com.google.protobuf (1 CVE)
TuxCare rebuilt 7 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.7-tuxcare.1...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.59 bug fix and security update
Red Hat OpenShift Container Platform release 4.17.59 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...