com.squareup.wire:wire-compiler (1.3.3), com.squareup.wire:wire-gson-support (1.3.3) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.3.3)

com.squareup.wire:wire-runtime MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.3 - com.squareup.wire:wire-gson-support 1.3.3 -...

com.squareup.retrofit:converter-wire (>=2.0.0-beta1, <=2.0.0-beta2), com.squareup.wire:wire-compiler (1.7.0) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.7.0)

com.squareup.wire:wire-runtime MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =2.0.0-beta1, =2.0.0-beta2 - com.squareup.wire:wire-compiler...

com.squareup.wire:wire-compiler (3.2.1), com.squareup.wire:wire-gradle-plugin (3.2.1) +7 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (3.2.1)

com.squareup.wire:wire-runtime MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.2.1 - com.squareup.wire:wire-gradle-plugin 3.2.1 -...

CVE-2026-1731

BeyondTrust CVE-2026-1731 Scanner Professional Python scanner for detecting BeyondTrust Remote Support / Privileged Remote Access exposure. Developer: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability CVE-2026-1731 is a critical...

CVE-2026-93113: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: unregister CAMCCGDSCCLK With the introduction of syncstate support in the clk and pmdomain subsystems, the following warning happens when the unused clocks are shutdown in camcc-sc8280xp: 15.408367...

Security update for mbedtls-2 (important)

openSUSE security update: security update for mbedtls-2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21864-1 Rating: important References: bsc1245810 bsc1252454 Cross-References: CVE-2025-52496 CVE-2025-59438 CVSS scores: CVE-2025-59438 SUSE : 5....

[SECURITY] Fedora 44 Update: python-configargparse-1.7.7-1.fc44

A drop-in replacement for argparse that allows options to also be set via config files and/or environment variables. Applications with more than a handful of user-settable options are best configured through a combination of command line args, config files, hard-cod ed defaults, and in some cases...

CVE-2026-92022

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92028

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

vader

VADER：用于漏洞评估、检测、解释和修复的人工评估基准 官方 GitHub 仓库：https://github.com/AfterQuery/vader Hugging Face 数据集：https://huggingface.co/datasets/AfterQuery/vader VADER 是一个人工评估基准 ，旨在衡量大型语言模型（LLMs）处理真实世界软件漏洞的能力。它包含 174 个真实世界漏洞案例 （从开源仓库中精选），涵盖四项任务： 漏洞识别与分类（CWE） 根因解释 补丁（修复） 测试计划生成 这些案例涵盖 15+ 编程语言 （例如...

django-ai-support (0.1.11), mseep-deer-flow (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-55253 via langgraph-checkpoint-mongodb (>=0.2.1, <=0.3.1)

langgraph-checkpoint-mongodb PYPI version =0.2.1, =0.1.0, =0.1.1 Source cves: CVE-2026-55253 Source advisory: MEND:CVE-2026-55253...

Astra Linux – Vulnerability in Firefox and Thunderbird

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

Astra Linux – Vulnerability in Firefox and Thunderbird

Another issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – Vulnerability in Firefox and Thunderbird

When exiting fullscreen mode, an iframe could mislead the browser regarding the current state of fullscreen, potentially causing confusion for users or leading to spoofing attacks. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

Astra Linux – Vulnerability in Firefox and Thunderbird

Mitigation bypass in the Networking: HTTP component. This vulnerability has been fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in Firefox and Thunderbird

Another issue with the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

Astra Linux – Vulnerability in Firefox and Thunderbird

Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Astra Linux – Vulnerability in Firefox

A memory safety bug has been fixed in Firefox 152. This vulnerability was addressed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – Vulnerability in Firefox

A memory safety bug has been fixed in Firefox 152. This vulnerability was addressed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – Vulnerability in Firefox and Thunderbird

If a Blob URL is loaded through some unusual user interaction, it may have been loaded by the system principal, granting additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...