CLEANSTART-2026-XU92282 Security fixes in kube-state-metrics 2.15.0-r1

Package kube-state-metrics version 2.15.0-r1 fixes 15 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39836, CVE-2026-42499...

CLEANSTART-2026-IV23706 Security fixes in kube-state-metrics 2.19.1-r0

Package kube-state-metrics version 2.19.1-r0 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-XF99533 Security fixes in kube-state-metrics 2.17.0-r3

Package kube-state-metrics version 2.17.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-AJ94183 Security fixes in kube-state-metrics-fips 2.17.0-r1

Package kube-state-metrics-fips version 2.17.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-GX93192 Security fixes in kube-state-metrics 2.10.1-r2

Package kube-state-metrics version 2.10.1-r2 fixes 19 vulnerabilities: CVE-2026-39835, CVE-2026-39828, CVE-2026-39827, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-IF30502 Security fixes in kube-state-metrics 2.10.1-r1

Package kube-state-metrics version 2.10.1-r1 fixes 24 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-MS06704 Security fixes in kube-state-metrics 2.15.0-r2

Package kube-state-metrics version 2.15.0-r2 fixes 3 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502...

CLEANSTART-2026-ZG09583 Security fixes in kube-state-metrics 2.16.0-r8

Package kube-state-metrics version 2.16.0-r8 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CVE-2026-13143

The WP Travel WordPress plugin before 11.8.1 does not verify PayPal Instant Payment Notifications through the PayPal post-back handshake before marking a booking paid, allowing unauthenticated attackers to forge a notification that flips an arbitrary pending booking to a paid and booked state at ...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

CVE-2026-64460

A flaw was found in the Linux kernel's PCI/IOV subsystem. When a PCI device fails to respond during a power state transition, the kernel's Virtual Function VF Resizable Base Address Register BAR restoration process can attempt to access memory outside of its allocated bounds. This out-of-bounds...

CVE-2026-17760

Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17760

Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17760

Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17760

CVE-2026-17760 affects Google Chrome with NoStatePrefetch; a side-channel information leakage vulnerability allowed a remote attacker to exfiltrate cross-origin data via a crafted HTML page. The description specifies impact as leakage of cross-origin data and identifies the root cause as NoStateP...

PT-2026-66521

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7.4 Description The Windows interactive service contains a flaw that allows remote attackers to trigger a service crash or persistent DNS state pollution. This occurs when a crafted search domain is...

Apache Traffic Server deserialization injection vulnerability

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a deserialization injection vulnerability, which stems from improper handling of disk cache fields and object lifecycle management. Attackers can...

RHEL 9 : kernel (RHSA-2026:47739)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47739 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amd/display: Do not skip...