Important: Red Hat Security Advisory: RHCS 10.8 bug fix and enhancement update

Updated RHCS 10.8 packages that fix several bugs are available. Red Hat Certificate System RHCS is a complete implementation of an enterprise software system designed to manage enterprise Public Key Infrastructure PKI deployments. Many of the subcomponents that comprise RHCS, such as the Tomcat...

CVE-2026-54727

creationtimestamp| type| source ---|---|--- 2026-07-29 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiee5rkj2b 2026-07-29 18:35:08+00:00| published-proof-of-concept| https://github.com/termux/proot-distro/security/advisories/GHSA-7h3g-4w2f-fj2f 2026-07-30 00:32:17+00:0...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +904 more potentially affected by CVE-2026-13697 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.0.1, =0.1.0, =0.2.0 and more Source cves: CVE-2026-13697 Source advisory: SNYK:JS-UNDICI-18426521...

Important: Red Hat Security Advisory: Red Hat Quay 3.18.0

Red Hat Quay 3.18.0 is now available with bug fixes and feature enhancements. Quay 3.18.0...

GHSA-JQ8W-8Q2F-FFM9

creationtimestamp| type| source ---|---|--- 2026-07-29 17:31:36+00:00| seen| https://gist.github.com/alon710/122d827ca97ab8457c12647e94a1482c...

DEBIAN-CVE-2026-13697

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stored in the default shared cache and...

CVE-2026-54663

creationtimestamp| type| source ---|---|--- 2026-07-29 16:35:19+00:00| published-proof-of-concept| https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-x36r-4347-pm5x...

CVE-2026-54664

creationtimestamp| type| source ---|---|--- 2026-07-29 16:35:14+00:00| published-proof-of-concept| https://github.com/acacode/swagger-typescript-api/security/advisories/GHSA-5f94-x226-ccpm 2026-07-29 18:08:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjfnwzxr2q...

CVE-2026-50558

creationtimestamp| type| source ---|---|--- 2026-07-29 16:35:05+00:00| published-proof-of-concept| https://github.com/brightio/penelope/security/advisories/GHSA-f42x-p2mx-hm8r...

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

Overview On July 27, 2026, JetBrains published a security advisory for CVE-2026-63077, a critical unauthenticated vulnerability affecting all versions of TeamCity On-Premises. The issue is classified as deserialization of untrusted data and has a CVSS score of 9.8. An unauthenticated remote...

CVE-2026-50641

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:16+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-50641...

CVE-2026-33385

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-33385...

GHSA-W284-33MX-6G9V

creationtimestamp| type| source ---|---|--- 2026-07-29 15:31:13+00:00| seen| https://gist.github.com/alon710/2872dac20223d7dd754cee0ee5c0587f...

02.aula (1.0.0), 19json-validator (>=0.0.3, <=0.0.4) +10637 more potentially affected by CVE-2026-67214 via nanoid (>=3.0.0, <=3.3.15)

nanoid NPM version =3.0.0, =0.0.3, =0.0.1, =0.1.23, =0.1.4, =1.0.0, =0.1.3, =1.0.0, =0.3.0, =0.0.1-alpha.3, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1-alpha.1, =0.0.1-alpha.2 and more Source cves: CVE-2026-67214 Source advisory: OSV:GHSA-28WG-GHJ8-5HJV...

GHSA-V3R7-H72X-CJCM

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:09+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2mxyaw2c 2026-08-04 13:32:14+00:00| seen| https://gist.github.com/alon710/95d41625eb91d5b304c0c5ed76c502de...

GHSA-954P-556P-R752

creationtimestamp| type| source ---|---|--- 2026-07-29 14:31:27+00:00| seen| https://gist.github.com/alon710/6612cc2025e5b81484a44c804b090d50...

GHSA-MCQQ-386F-GVF4 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-gcp, linux-qemu...

UBUNTU-CVE-2026-67214

nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...

GHSA-8M8R-38JM-F355

creationtimestamp| type| source ---|---|--- 2026-07-29 13:32:26+00:00| seen| https://gist.github.com/alon710/9d9829ba6ab40face903027898206e80...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.72.0-0.1.3.hum1 aarch64, x8664 trivy-0.72.0-0.1.3.hum1.src src Security Fixes: trivy: CVE-2026-49834...