Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: doxygen (UTSA-2026-021269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021269 advisory. In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of...

CVE-2026-33378 Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro

Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...

Deserialization of Untrusted Data

Overview langchain is a Building applications with LLMs through composability Affected versions of this package are vulnerable to Deserialization of Untrusted Data when fetching and processing prompt manifests from external sources. An attacker can execute arbitrary code or manipulate application...

Deserialization of Untrusted Data

Overview langsmith is a Client library to connect to the LangSmith Observability and Evaluation Platform. Affected versions of this package are vulnerable to Deserialization of Untrusted Data when fetching and processing prompt manifests from external sources. An attacker can execute arbitrary co...

Deserialization of Untrusted Data

Overview langsmith is a Client library to connect to the LangSmith Observability and Evaluation Platform. Affected versions of this package are vulnerable to Deserialization of Untrusted Data when fetching and processing prompt manifests from external sources. An attacker can execute arbitrary co...

CVE-2026-4782

creationtimestamp| type| source ---|---|--- 2026-05-13 12:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlqdbejomm2v 2026-05-13 14:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlqjfyf55y2h 2026-05-14 00:44:08+00:00| seen|...

CVE-2026-44258

creationtimestamp| type| source ---|---|--- 2026-05-13 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116565739119113435 2026-05-13 06:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlpmt5s6m52m...

CVE-2025-61972

creationtimestamp| type| source ---|---|--- 2026-05-13 05:11:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlpk3nswl32n 2026-05-13 05:35:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlplh5jpni2v...

CVE-2026-44257

creationtimestamp| type| source ---|---|--- 2026-05-13 04:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlphsg4x3b23 2026-05-13 04:30:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116565385652211978...

CVE-2026-42289

creationtimestamp| type| source ---|---|--- 2026-05-13 01:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp4whzqty2h 2026-05-13 03:13:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpdivu7g22z...

Numerical Security Analysis for Practical Quantum Key Distribution

Quantum key distribution QKD promises information-theoretic security based on quantum mechanics and idealized device models. Practical implementations, however, deviate from these models due to unavoidable device imperfections, and existing security proofs fall short of capturing the complexity o...

acegisecurity:acegi-security-catalina (>=0.7.0 <=0.9.0), ch.qos.logback:logback-access (>=${parent.version} <=0.8) +40 more potentially affected by CVE-2026-43512 via tomcat:catalina (>=4.0.6 <=5.5.9)

tomcat:catalina MAVEN version =4.0.6, =0.7.0, =$parent.version, =0.6, =3.2.10-1-SP3seam2hibernate5, =1.5, =1.0, =1.0, =1.0.0, =4.7.1, =4.7.2 - org.apache.geronimo.assemblies:geronimo-tomcat-minimal =1.2-beta - org.apache.geronimo.configs:ca-helper-tomcat =1.2-beta -...

CVE-2026-7437

creationtimestamp| type| source ---|---|--- 2026-05-12 16:33:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlo7piqk362l 2026-05-12 17:13:15+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mlobxbow3o2s...

CVE-2026-25787

creationtimestamp| type| source ---|---|--- 2026-05-12 11:11:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnnpkhaew2g 2026-05-12 11:29:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnor6rqcr2n 2026-05-13 13:51:56+00:00| seen|...

CVE-2026-27662

creationtimestamp| type| source ---|---|--- 2026-05-12 11:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnn65y3oa2z 2026-05-12 11:38:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnpbgca5h2r 2026-05-14 10:00:00+00:00| seen|...

CVE-2026-8162

creationtimestamp| type| source ---|---|--- 2026-05-12 09:10:50+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mlngymcjjk27 2026-05-12 10:38:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnlwa47v52l 2026-05-12 11:56:57+00:00| seen|...

CVE-2026-39432

creationtimestamp| type| source ---|---|--- 2026-05-12 09:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116560785159246589 2026-05-12 09:00:36+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlngge3f4c22 2026-05-12 09:22:57+00:00| seen|...

CVE-2026-8159

creationtimestamp| type| source ---|---|--- 2026-05-12 08:41:22+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mlnfdvwb3c27 2026-05-12 10:39:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnlwokxtb2g 2026-05-12 11:27:19+00:00| seen|...

CVE-2026-4827

creationtimestamp| type| source ---|---|--- 2026-05-12 04:05:34+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-11 2026-05-12 14:20:40+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybqzs6w2w 2026-05-12 15:35:50+00:00| seen|...

Cribl 安全漏洞

Cribl is a log analysis tool. Versions of Cribl prior to 4.17.1 have security vulnerabilities. There is currently no information regarding these vulnerabilities. Please stay informed by following CNNVD or the vendor’s announcements...