Fedora 43 : buildah / podman (2026-be3238ba3e)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-be3238ba3e advisory. Update to buildah 1.43.2 and podman 5.8.3 Security fix for CVE-2026-44517 Tenable has extracted the preceding description block directly from the Fedora...

Photon OS 5.0: Linux PHSA-2026-5.0-0844

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0844. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 43 : pdns-recursor (2026-34cca3d390)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-34cca3d390 advisory. update to latest upstream release to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to the default configuration of REVERSEPROXYTRUSTEDPROXIES allowing all sources. An attacker can gain unauthorized access by sending spoofed reverse-proxy authentication headers such as X-WEBAUTH-USER...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the label process. An attacker can obtain sensitive information by accessing labels associated with private organizations without proper authorization. Remediation Upgrade...

CVE-2026-57988 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

GHSA-574F-3G2M-X479 vulnerabilities

Vulnerabilities for packages: logstash-fips, hadoop-fips, sonarqube, logstash, opensearch...

GHSA-V62P-RQ8G-8H59 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-H7CP-R72F-JXH6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-52V5-JR5W-GJXR vulnerabilities

Vulnerabilities for packages: pulumi...

CVE-2026-22555 Gitea organization forks can expose organization secrets without create permission

Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets...

[SECURITY] [DLA 4665-1] linux security update

Debian LTS Advisory DLA-4665-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 03, 2026 https://wiki.debian.org/LTS Package : linux Version : 6.1.176-1 CVE ID : CVE-2023-53292 CVE-2023-53989 CVE-2023-54125 CVE-2023-54271 CVE-2023-54322 CVE-2024-27012...

GHSA-RF99-F9J2-GV3F vulnerabilities

Vulnerabilities for packages: wildfly...

GHSA-WMXR-6J5F-838P vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

Chromium: CVE-2026-13953 Inappropriate implementation in SplitView

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14088 Uninitialized Use in Canvas

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14025 Use after free in Views

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: haproxy: haproxy-3.0.25-0.1.hum1 aarch64, x8664 haproxy-3.0.25-0.1.hum1.src src...

ROOT-OS-DEBIAN-13-CVE-2026-45031 CVE-2026-45031 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-45031 in the rootio-imagemagick package for Root:Debian:13. Multiple fixed versions available...

@devpodio/github-extension (1.0.0), @eclipse-glsp-examples/workflow-theia (>=1.0.0-theia1.27.0, <=1.1.0-next.e29c96e.130) +119 more potentially affected by CVE-2026-10055 via @theia/request (>=1.26.0, <=1.72.3)

@theia/request NPM version =1.26.0, =1.0.0-theia1.27.0, =1.0.0, =0.7.1, =1.58.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.57.0-next.37, =1.46.0-next.241, =1.72.3 and more Source cves: CVE-2026-10055 Source advisory: SNYK:JS-THEIAREQUEST-17810719...