GHSA-3VGW-585J-4M45 BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284

The unarchive internal module's archive extraction commands perform no code-level validation on extracted file paths, relying entirely on the behavior of external tools e.g. GNU tar which varies by platform. While CVE-2025-10284 addressed git-specific RCE vectors, the underlying archive extractio...

GHSA-5JV7-2MJM-H6QJ npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

Summary The published npm package praisonai ships dist/tools/utility-tools.js, which exports a shellcommand helper described in source as: text Execute shell command safe version - read-only commands The helper attempts to enforce a safe read-only command allowlist by checking only the first...

CVE-2026-48979

PHP Standard Library PSL is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the Psl\H2\ServerConnection does not validate that the total bytes received in DATA frames match the content-length header declared in the...

USN-8361-3: Linux kernel vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Packet sockets; CVE-2026-31504...

UBUNTU-CVE-2026-39044

Integer overflow in WAV parser cue handling...

CVE-2026-46970

...

CVE-2026-46963

...

CVE-2026-46957

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-46957

...

CVE-2026-46953

...

CVE-2026-46951

Technical details about CVE-2026-46951 are not publicly provided in the supplied documents. Monitor Oracle security alerts and CVE feeds for updates on affected products, impact, and fixes.

CVE-2026-46946

Technical details are not publicly available in the provided documents for CVE-2026-46946; monitor for updates.

CVE-2026-46935

...

CVE-2026-46919

Technical details about CVE-2026-46919 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records for affected products, impact, and remediation.

CVE-2026-46916

Technical details for CVE-2026-46916 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE listings.

CVE-2026-46914

...

CVE-2026-46911

Technical details (affected product, component, root cause, versions or fix) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-46900

...

CVE-2026-46862

Technical details for CVE-2026-46862 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE records regarding affected products, impact, and fixes.

CVE-2026-46845

...