GHSA-4C8G-83QW-93J6 vulnerabilities

Vulnerabilities for packages: kibana, arangodb, prism, keep, gitlab-rails-ce, gitlab-rails-ce-fips, unleash-proxy, nextcloud-server, vitess, opensearch-dashboards-fips, wazuh-dashboard, keep-fips, yaml-language-server, wazuh-dashboard-fips, opensearch-dashboards...

GHSA-V245-V573-V5VM vulnerabilities

Vulnerabilities for packages: kibana, gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, spark, opensearch...

GHSA-XCPC-8H2W-3J85 vulnerabilities

Vulnerabilities for packages: saf, sqlpad...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.5

Updated Red Hat Enterprise Linux AI 3.3.5 container disk images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat...

CVE-2026-28912

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A user may be able to elevate privileges...

GHSA-259R-337F-4RFW

creationtimestamp| type| source ---|---|--- 2026-07-27 19:48:38+00:00| seen| https://gist.github.com/allanrogerr/6d10196ab8eb0d80a2cfca871b45d9a8...

GHSA-HRXH-6V49-42GF

creationtimestamp| type| source ---|---|--- 2026-07-27 19:48:38+00:00| seen| https://gist.github.com/allanrogerr/6d10196ab8eb0d80a2cfca871b45d9a8 2026-08-03 12:03:59+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3ms6hejb7hx2j...

Important: Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update

An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

GHSA-35Q8-9MJ6-WJMF

creationtimestamp| type| source ---|---|--- 2026-07-27 19:18:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmfzh6ff2o...

EUVD-2026-49401

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...

GHSA-GV7G-JM28-CR3M

creationtimestamp| type| source ---|---|--- 2026-07-27 16:55:41+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrnefsqhi72u 2026-07-28 21:00:04+00:00| seen| https://t.me/truesecator/8452 2026-07-29 00:00:12+00:00| seen| https://t.me/truesecator/8452 2026-07-29 01:00:04+00:00| seen|...

UBUNTU-CVE-2026-17574

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read...

GHSA-RCQ7-RV5G-J3R4

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3344 2026-07-28 00:00:31+00:00| published-proof-of-concept| https://t.me/bdufstecru/3344...

GHSA-93WV-JW9V-4972

creationtimestamp| type| source ---|---|--- 2026-07-27 16:00:06+00:00| seen| https://t.me/bdufstecru/3345 2026-07-28 00:00:32+00:00| published-proof-of-concept| https://t.me/bdufstecru/3345...

CVE-2026-17530 AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function buildhandofftoolset of the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...

CVE-2026-10819

Mattermost versions 11.6.x = 11.6.5, 10.11.x = 10.11.20, 11.8.x = 11.8.1, 11.7.x = 11.7.4 fail to limit the number of frames and enforce the file size cap on animated GIF uploads, which allows an authenticated attacker to cause a denial of service via a crafted animated GIF uploaded as a custom...

CVE-2026-10819

The CVE CVE-2026-10819 affects Mattermost server versions 11.6.x <= 11.6.5, 10.11.x <= 10.11.20, 11.8.x <= 11.8.1, and 11.7.x

EUVD-2026-49253

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to bound the time and resource consumption of server-side document content extraction which allows an authenticated user with file-upload permission to degrade file uploads for all users on the server v...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.12 Images

Red Hat OpenShift Virtualization release v4.12 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...