External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the store process. An attacker can overwrite arbitrary existing files writable by the PHP process with partially controlled content by supplying a crafted export path, potentially leading to...

CVE-2026-77091

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

CVE-2026-77091 DataCube Security Feature Bypass

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

CVE-2026-77091

Commvault DataCube contained a path traversal flaw that could bypass security feature enforcement . The CVSS 4.0 score is 8.5 (HIGH) , with a local attack vector requiring low privileges and no user interaction, resulting in high impact to confidentiality, integrity, and availability of the vulne...

EUVD-2026-72723

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

CVE-2026-77091 DataCube Security Feature Bypass

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

CLEANSTART-2026-PX76402 etcd is a distributed key-value store for the data of a distributed system

Multiple security vulnerabilities affect the kubernetes package. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

expat security update

2.7.3-59 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog 2.7.3-58 - Fix CVE-2026-50219: forbid XMLParserFree/Reset from handlers 2.7.3-57 - expat: backport CVE-2026-45186 fix attribute collision check DoS 2.7.3-56 - Rebase to 2.7.3 and add VCS tag Thu Jun 05 2025...

CVE-2026-77091: Improper Limitation of a Pathname to a Restricted Directory

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

PT-2026-87044

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...

Security update for hauler (moderate)

openSUSE security update: security update for hauler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21793-1 Rating: moderate References: bsc1265425 bsc1276124 bsc1276651 bsc1277965 Cross-References: CVE-2026-37236 CVE-2026-41178 CVE-2026-41888...

Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

WordPress Music Store plugin < 1.4.5 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by nobody in WordPress Plugin Music Store versions 1.4.5...

MAL-2026-16031 Malicious code in cb-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b89e0045c311aec83f8b4710dc1709b64bf083541c7ad26d639b89f5c98a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cb-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b89e0045c311aec83f8b4710dc1709b64bf083541c7ad26d639b89f5c98a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Authentication Bypass by Primary Weakness

Overview Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the connection reuse process when a different Native CA Store setting is used than the one originally configured. An attacker can compromise the integrity of HTTPS connections by exploiting t...

AZL-99849 CVE-2026-82208 affecting package rust 1.90.0-10

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

AZL-99807 CVE-2026-80231 affecting package mysql 8.0.46-1

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

AZL-99831 CVE-2026-80231 affecting package rust 1.75.0-30

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

AZL-99855 CVE-2026-80231 affecting package rust 1.90.0-10

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...