CVE-2026-22782 RustFS RPC signature verification logs shared secret

RustFS is a distributed object storage system built in Rust. From = 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. In...

GHSA-333V-68XH-8MMQ RustFS's RPC signature verification logs shared secret

Summary Invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. Details In crates/ecstore/src/rpc/httpauth.rs:115-122 , the invalid signature branch logs sensitive data: rs if signature !=...

RustFS's RPC signature verification logs shared secret

Summary Invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. Details In crates/ecstore/src/rpc/httpauth.rs:115-122 , the invalid signature branch logs sensitive data: rs if signature !=...

EUVD-2026-3106

Malicious code in @spx-workforceops/shared-vue npm...

EUVD-2026-3103

Malicious code in @wbgo/shared npm...

Malicious code in @wbgo/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb329e935e8aeef2d3a86a6d85a8b57f76574d7e339b3d50c0504601b9e67e1 The package @wbgo/shared was found to contain malicious code. Source: ghsa-malware 98749f712baf86a5e8d0a6c22c6b6998a4decd916771550d27a31203104422f9 A...

MAL-2026-263 Malicious code in @spx-workforceops/shared-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3a2bf3fdf03e628dd6981636169c3053e7aa01b62d709e07a1e13184f0b93 The package @spx-workforceops/shared-vue was found to contain malicious code. Source: ghsa-malware...

MAL-2026-266 Malicious code in @wbgo/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb329e935e8aeef2d3a86a6d85a8b57f76574d7e339b3d50c0504601b9e67e1 The package @wbgo/shared was found to contain malicious code. Source: ghsa-malware 98749f712baf86a5e8d0a6c22c6b6998a4decd916771550d27a31203104422f9 A...

Malicious code in @spx-workforceops/shared-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3a2bf3fdf03e628dd6981636169c3053e7aa01b62d709e07a1e13184f0b93 The package @spx-workforceops/shared-vue was found to contain malicious code. Source: ghsa-malware...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-003884)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003884 advisory. A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004461 advisory. A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource...

MiracleLinux 4 : qt-4.6.2-26.AXS4 (AXSA:2013-282:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-282:01 advisory. Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling. Security issues fixed with thi...

MiracleLinux 4 : glibc-2.12-1.209.AXS4 (AXSA:2017-1373:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1373:01 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as ...

CVE-2025-69581

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000873 advisory. Multiple race conditions in ipc/shm.c in the Linux kernel before 3.12.2 allow local users to cause a denial of service use-after-free and system crash or possibly ha...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001393 advisory. A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003853 advisory. In calcvmmayflags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001430 advisory. A use-after-free exists in drivers/tee/teeshm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in teeshmgetfromid...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004338 advisory. A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource...

CVE-2025-71089

A security vulnerability was found in the Linux kernel's IOMMU Shared Virtual Addressing SVA implementation on x86 architecture. When SVA is enabled, the IOMMU caches kernel page table entries. Since the kernel lacks a mechanism to notify the IOMMU when kernel page table pages are freed and...