Important: Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update

An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-55554

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:26+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-wvh6-f5jh-8gw4...

CVE-2026-56722

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:19+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-cx96-42px-69fm...

CVE-2026-56821

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:12+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-g7hg-vrcf-mvmr 2026-07-29 02:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwjehar622 2026-07-29 12:15:13+00:00| seen|...

CVE-2026-56822

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:10+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-wc96-39fc-566f 2026-07-29 02:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvzcxpus2j 2026-07-29 12:15:10+00:00| seen|...

CVE-2026-59920

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:05+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-3g8r-4pfx-jmfh...

CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3

CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3. A patched version of the package is available...

[SECURITY] [DSA 6395-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6395-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...

Improper Check for Certificate Revocation

Overview io.netty:netty-handler-ssl-ocsp is a Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. Affected versions of this package are vulnerable to Improper Check for Certificate Revocation in t...

K000162379: Linux Kernel vulnerabilities CVE-2026-23310, CVE-2026-23336, CVE-2026-23340, and CVE-2026-23343

Security Advisory Description CVE-2026-23310 In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmithashpolicy change when XDP is loaded bondoptionmodeset already rejects mode changes that would make a loaded XDP program incompatible via...

GO-2026-6056 Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts in code.gitea.io/gitea

Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts in code.gitea.io/gitea...

GO-2026-6020 File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope in github.com/filebrowser/filebrowser

File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope in github.com/filebrowser/filebrowser...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: seata, airbyte-server, wavefront-proxy, flyway-fips, knative-kafka-broker-fips, confluent-kafka, commercial-elasticsearch, apache-activemq-fips, knative-kafka-broker, elasticsearch, hono, ruby3.3-jrjackson, nuxeo, camunda, kafbat-ui-fips, opensearch, pinot, zookeeper...

GHSA-H95V-H523-3MW8 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, osv-scanner, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kms, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-sqs, crossplane-provider-keycloak,...

GHSA-MVH2-CRG5-V77C

creationtimestamp| type| source ---|---|--- 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-23 00:00:22+00:00| seen| https://t.me/bdufstecru/3334...

GHSA-C35G-MGC3-95RX

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

GHSA-M5FR-RV3H-XG2R

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

GHSA-537C-GMF6-5CCF

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

DEBIAN-CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...