Rocky Linux 9 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_38511)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202638511 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vim:...

CentOS Linux 7 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (CENTOS7:CLSA-2026:1783591320)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1783591320 advisory. - Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI...

CLEANSTART-2026-SZ57384 Security fix for GHSA-3fxj-6jh8-hvhx applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UC45945 Security fix for GHSA-rjr7-jggh-pgcp applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VU46471 Security fix for GHSA-9g5q-2w5x-hmxf applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NL66537 Open Redirect vulnerability in the go-chi/chi >=5

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

CLEANSTART-2026-ZK17836 Slack Nebula before 1

Security vulnerability affects the step-ca package. Slack Nebula before 1...

CLEANSTART-2026-FB73701 Nebula is a scalable overlay networking tool

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

PT-2026-108486

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

PT-2026-108398

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

CVE-2026-76805 Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data more than once, creating a second evaluation pass that allows response content captured by an internal: true extractor...

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...

CVE-2026-15664

Quill Forms (Conversational Multi Step Forms, Surveys & Quizzes) for WordPress is affected by a stored cross-site scripting vulnerability in all versions up to and including 5.7.1 . The flaw stems from insufficient input sanitization and output escaping in the Multiple Choice "Other" field . An u...

CVE-2026-15664: Improper Neutralization of Input During Web Page Generation

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple Choice 'Other' Value in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible f...

PT-2026-95780

Name of the Vulnerable Software and Affected Versions Quill Forms | Conversational Multi Step Forms, Surveys & quizzes versions prior to 5.7.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique...

CLEANSTART-2026-PQ02087 Security fix for CVE-2025-62820 applied in: step 0.28.7-r0, step 0.28.7-r2, step-ca 0.27.5-r0, step-cli 0.27.5-r1, step-cli 0.28.7-r0, step-issuer 0.9.9-r0, step-issuer-fips 0.9.11-r1

CVE-2025-62820 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-CI91808 Security fix for GHSA-j7c9-79x7-8hpm applied in: step-issuer-fips 0.9.9-r1

Security vulnerability affects the step-issuer-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KX60703 Security fix for GHSA-x6fh-7qmf-69xh applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r1

GHSA-x6fh-7qmf-69xh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RS62088 Security fix for GHSA-j7c9-79x7-8hpr applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r3

GHSA-j7c9-79x7-8hpr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZH50133 Security fix for GHSA-h8cp-697h-8c8p applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r3

GHSA-h8cp-697h-8c8p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...