Fedora 43 : sssd (2026-9ab663dcd4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9ab663dcd4 advisory. CVE fixes: CVE-2026-12610 CVE-2026-14474 CVE-2026-14476 - rhbz2494777: CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssdpam' process -...

Fedora 44 : dotnet10.0 (2026-f738966fc9)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f738966fc9 advisory. Update to .NET SDK 10.0.110 and Runtime 10.0.10 Fixes:...

openSUSE 16: gio-branding-upstream / glib2-devel / glib2-devel-static / etc (openSUSE-SU-2026:21410-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21410-1 advisory. - CVE-2026-58010: error during gvstupleisnormal alignment validation could cause a 1-byte out-of-bounds read bsc1270009. - CVE-2026-58011: inval...

GHSA-6VCH-Q96H-7GC3

creationtimestamp| type| source ---|---|--- 2026-07-24 23:31:23+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4 2026-07-25 00:00:18+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4...

GHSA-M3QF-58WF-W979

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/dc8fbe1b073218955707634edeb9a32e...

GHSA-3WP3-XXJ9-5JQQ

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...

CVE-2026-55497

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:12+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-g9j2-8w95-3vwv...

CVE-2026-55502

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:09+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-hq88-5x99-x3gf...

CVE-2026-62323

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:05+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-c3jm-gv5r-9wcp...

GHSA-4C39-4CCG-62R3 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GO-2026-5971 GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function in github.com/osrg/gobgp

GoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function in github.com/osrg/gobgp...

CVE-2026-59952

creationtimestamp| type| source ---|---|--- 2026-07-24 18:35:24+00:00| published-proof-of-concept| https://github.com/open-circle/valibot/security/advisories/GHSA-5qjj-4xww-7phc 2026-07-30 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrtc4apzxn25...

CVE-2026-59222

creationtimestamp| type| source ---|---|--- 2026-07-24 18:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-gh7p-78x6-jw6m...

CVE-2026-54673

creationtimestamp| type| source ---|---|--- 2026-07-24 16:35:24+00:00| published-proof-of-concept| https://github.com/electron-userland/electron-builder/security/advisories/GHSA-p2f4-r6v6-j797...

CVE-2026-63632

creationtimestamp| type| source ---|---|--- 2026-07-24 16:35:09+00:00| published-proof-of-concept| https://github.com/onnx/onnx/security/advisories/GHSA-p893-rvq9-2xf9...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the JNX decoder. An attacker can cause a heap buffer over-write by processing extremely large files on 32-bit builds. Remediation A fix was pushed into the master branch but not yet published. Reference...

CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

GHSA-V3J6-27VC-7PW2 ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check

Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path...

Improper Encoding or Escaping of Output

Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output through the HTML encoding. An attacker can execute arbitrary code by supplying specially crafted input that is not properly sanitized. Remediation A fix was pushed into the master branch but not y...

React Router: Unauthenticated Denial of Service via Inefficient Route Matching

This is a follow up to https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78 that covers additional reported scenarios in which the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response...