phpstan v2.2.6

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

CVE-2026-17459

CVE-2026-17459 affects SparkJava (up to 2.9.4), specifically the ExternalResourceHandler.java function staticFiles.externalLocation. The vulnerability enables symlink following via manipulations of the externalLocation path, with a remote attack surface. Exploitation is described as Proof-of-Conc...

SUSE CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64449

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...

UBUNTU-CVE-2026-64463

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns...

UBUNTU-CVE-2026-64338

In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720probe registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If get1284register fails, the error path drops the driver...

CVE-2026-64495

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i if...

CVE-2026-64508 bpf: Support for hardening against JIT spraying

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

EUVD-2026-48852

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64508

CVE-2026-64508 relates to a Linux kernel vulnerability in BPF JIT memory reuse. The issue arises when the BPF JIT allocator reuses space for new programs, potentially letting indirect jumps reuse stale branch predictions. Fix implemented: flush indirect branch predictors on JIT memory reuse via a...

CVE-2026-64463 usb: typec: tcpci_rt1711h: unregister TCPCI port with devres

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns...

CVE-2026-64338 USB: misc: uss720: unregister parport on probe failure

In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720probe registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If get1284register fails, the error path drops the driver...

opentaint analyzer/2026.07.24.401b297

The open source taint analysis engine for the AI era Formal taint analysis for application security — finds what AST-pattern matchers miss, lets LLM agents enact rules from vulnerabilities, scales where neither can alone. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dan...

Linux Distros Unpatched Vulnerability : CVE-2026-64463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts...

PT-2026-64729

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF JIT allocator where multiple small programs are packed into larger executable allocations and space is reused as programs are loaded and freed. When new code i...

gitgalaxy — Updated!

GitGalaxy Docs · Visualizer 1 scan · 97 structural signals · 50+ languages · 0 need for compilation 19 risk exposure scores · 6 final reports · 0 dependencies · pip install gitgalaxy What Pain Point Does This Solve? GitGalaxy exists for one recurring problem: understanding a large, real,...

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Summary The getallmodels handlers in routers/openai.py and routers/ollama.py intended to cache their permission-filtered model lists per user, but the @cached decorator was misconfigured: it passed a key= lambda instead of keybuilder=. In aiocache 0.12.3 the pinned version, key= is a static cache...

@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

Impact @fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate slashes in the pathname used for file resolution. Non-canonical pathnames such as //file, /./file, or /public/../private/file bypass allowedPath filtering while resolving to the intended file o...

@cognidesk/integration-ticketing-servicenow (>=0.0.4, <=0.0.6), @darthcav/ts-http-server (0.9.1) +16 more potentially affected by CVE-2026-7120 via @fastify/static (>=10.1.0, <=10.1.1)

@fastify/static NPM version =10.1.0, =0.0.4, =3.1.17, =1.3.8, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =4.11.0, =5.1.0, =6.5.2, =4.6.0, =4.8.4 and more Source cves: CVE-2026-7120 Source advisory: OSV:GHSA-8PVW-JCV7-9CMJ...