Credentials disclosure in the crawler

More info at https://contao.org/en/security-advisories/credentials-disclosure-in-the-crawler...

Path traversal in the jobs module

More info at https://contao.org/en/security-advisories/path-traversal-in-the-jobs-module...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via deeply nested field names in multipart form data. An attacker can exhaust CPU and memory resources by sending a single HTTP request with a crafted multipart body containing excessively nested field names...

@ammar_sk/shared-lib (0.0.4), @angulartoolsdr/control-material (>=20.0.3, <=20.2.4) +43 more potentially affected by CVE-2026-54267 via @angular/core (>=20.0.0, <=20.3.21)

@angular/core NPM version =20.0.0, =20.0.3, =20.0.6, =20.0.6, =5.1.121, =5.1.121, =261.20.7, =261.1.1, =261.1.5, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 - @getflip/swirl-components-angular 0.472.0-beta-20260406102253 and more Source cves:...

@ammar_sk/shared-lib (0.0.4), @angulartoolsdr/control-material (>=20.0.3, <=20.2.4) +43 more potentially affected by CVE-2026-54267 via @angular/core (>=20.0.0, <=20.3.21)

@angular/core NPM version =20.0.0, =20.0.3, =20.0.6, =20.0.6, =5.1.121, =5.1.121, =261.20.7, =261.1.1, =261.1.5, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 - @getflip/swirl-components-angular 0.472.0-beta-20260406102253 and more Source cves:...

EUVD-2026-36725

Mattermost Desktop App versions =6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that...

GHSA-CHGR-C6PX-7XPP

creationtimestamp| type| source ---|---|--- 2026-06-15 11:41:32+00:00| seen| https://gist.github.com/alon710/7781242dd6423ae75e05b31377b89606...

GHSA-CH3Q-CW5R-F4HG

creationtimestamp| type| source ---|---|--- 2026-06-15 11:11:47+00:00| seen| https://gist.github.com/alon710/3171d078d5c19056080e6296ed9edb03 2026-06-19 12:30:23+00:00| seen| https://bsky.app/profile/getpacketai.bsky.social/post/3mondui6gig27...

GHSA-VC8P-8PXG-RFWG

creationtimestamp| type| source ---|---|--- 2026-06-15 10:41:12+00:00| seen| https://gist.github.com/alon710/324e2f3b899f3fc7cc3244012ed256f9...

Important: Red Hat Security Advisory: valkey security update

An update for valkey is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHSA-2026:25908 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:25907 Red Hat Security Advisory: gimp security update

Bulletin has no description...

RHSA-2026:25901 Red Hat Security Advisory: gimp security update

Bulletin has no description...

RHSA-2026:25899 Red Hat Security Advisory: gimp security update

Bulletin has no description...

CVE-2026-12207

The CVE concerns medkey-org medkey HTTP REST API (up to commit fc09b7ba9441ff590b72d428d5380834216b09ed). The vulnerability lies in the actionGetPatientById function of app/modules/medical/port/rest/controllers/PatientController.php, where manipulating the ID argument leads to improper control of...

TencentOS Server 4: vim (TSSA-2026:0347)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0347 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Debian dla-4630 : libcrypto1.1-udeb - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4630 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4630-1 [email protected]...

Debian dla-4627 : kernel-wedge - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4627 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4627-1 [email protected] https://www.debian.org/lts/security/ B...

Debian dla-4628 : linux-base - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4628 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4628-1 [email protected] https://www.debian.org/lts/security/ B...

RHEL 10 : yggdrasil-worker-package-manager (RHSA-2026:25999)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:25999 advisory. yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and...