CVE-2026-69088

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992198)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992198 advisory. In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in createstaticcallsections strdup allocates memory for keyname. We need...

Vyper Code Issue Vulnerability

Vyper is the Pythonic smart contract language for EVM. A code issue vulnerability exists in Vyper version 0.3.10 and prior versions that stems from not disabling static and delegate calls...

Eclipse OpenJ9 安全漏洞

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in Eclipse Openj9 version 0.25, which stems from the fact that the jdk.internal.reflect.ConstantPool API causes the JVM to pre-parse...