RHSA-2026:9108 Red Hat Security Advisory: gvisor-tap-vsock security update

Bulletin has no description...

Important: Red Hat Security Advisory: gvisor-tap-vsock security update

An update for gvisor-tap-vsock is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Malicious code in tap-wordpress (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53e2ce83230d861f844469c970eee52f778a63852ef04de9007e9bb8f883256e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-2151 Malicious code in tap-wordpress (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53e2ce83230d861f844469c970eee52f778a63852ef04de9007e9bb8f883256e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2026-23276

In the Linux kernel, the following vulnerability has been resolved: net: add xmit recursion limit to tunnel xmit functions Tunnel xmit functions iptunnelxmit, ip6tunnelxmit lack their own recursion limit. When a bond device in broadcast mode has GRE tap interfaces as slaves, and those GRE tunnels...

Malicious Package

Overview tahoe-tap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in tahoe-tap (npm)

Malicious package detected. Executes code during installation via preinstall script in package.json and has only one version published. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deec4b3e879632ae9819b52e88ae689725b1af688aecd541e498d2bac084f848 The package...

MAL-2026-1387 Malicious code in tahoe-tap (npm)

Malicious package detected. Executes code during installation via preinstall script in package.json and has only one version published. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deec4b3e879632ae9819b52e88ae689725b1af688aecd541e498d2bac084f848 The package...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: do not check the confirmed bit in brnflocalin after confirmation. When sending a broadcast packet to a tap device, which is added to a bridge, the brnflocalin function is called to confirm the conntrack. I...

CVE-2026-24686 go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names

go-tuf is a Go implementation of The Update Framework TUF. go-tuf's TAP 4 Multirepo Client uses the map file repository name string repoName as a filesystem path component when selecting the local metadata cache directory. Starting in version 2.0.0 and prior to version 2.4.1, if an application...

CVE-2025-2204

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap allows Cross-Site Scripting XSS.This issue affects Tap: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not...

CVE-2025-2204

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...

CVE-2025-2204 XSS in Tapandsign Technologies' Tap&Sign App

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...

CVE-2025-2204

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...

CVE-2025-2204

Technical details about CVE-2025-2204 are not publicly available in the provided documents. Monitor for updates.

Tap&Sign cross-site scripting vulnerabilities

Tap&Sign is a user-friendly and legally binding electronic signature solution provided by Tap&Sign Corporation. Versions of Tap&Sign prior to 23012026 contained a cross-site scripting vulnerability, which was caused by improper input handling and could lead to cross-site scripting attacks...

PT-2026-4350

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS.This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but d...

MiracleLinux 9 : gvisor-tap-vsock-0.7.3-3.el9_4.ML.1 (AXSA:2024-8444:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8444:02 advisory. golang: net/http: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 CVE-2023-45290 When parsing a multipart form either explicitly with...

MiracleLinux 9 : gvisor-tap-vsock-0.7.3-4.el9_4.ML.1 (AXSA:2024-8546:03)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8546:03 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Tenable has extracted the preceding description block directly...

MiracleLinux 9 : gvisor-tap-vsock-0.7.3-5.el9_4.ML.1 (AXSA:2024-8751:04)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8751:04 advisory. golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm CVE-2024-24783 Tenable has extracted the preceding description block...