EUVD-2026-59759

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

CVE-2026-18549

The CVE-2026-18549 issue affects @fastify/multipart versions 5.3.0 through 10.1.0. When the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the stream remains open. If the client aborts before the terminating boundary is sent, abort cleanup...

CVE-2026-41179 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2022-0587 vulnerabilities

Vulnerabilities for packages: opa...

GO-2024-2860 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-73584

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the /tmp directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. Th...

UBUNTU-CVE-2026-73585

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during scri...

CVE-2026-73584

The CVE-2026-73584 issue affects sblim-sfcb. A race condition during privileged instance migration allows a local, low-privileged attacker to manipulate a temporary file in /tmp and repeatedly recreate a symlink to redirect privileged output to an arbitrary file, potentially causing privileged fi...

Linux Distros Unpatched Vulnerability : CVE-2026-73584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544

CVE-2026-50544 affects NortheBridge/luminalshine (Moonlight-compatible game stream host). On Windows, prior to version 26.05.0-rc4, a file created by the SYSTEM service resides at C:\ProgramData\LuminalShine\config\apps.json via src/platform/windows/misc.cpp. Under default ProgramData inheritance...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2025-59326

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

PT-2026-71074

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to enforce Integrity Measurement Architecture IMA policy protections across temporary file systems. IMA is a kernel-based mechanism that maintains a...

EUVD-2025-210719

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

Security update for libarchive

This update for libarchive fixes the following issues: creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. file descriptor leak in the mtree parser cleanup path could le...

CVE-2026-71309 vulnerabilities

Vulnerabilities for packages: telegraf, rclone-fips...

Astra Linux – Vulnerability in glib2.0

A flaw was discovered in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability enables a local attacker to...

EulerOS 2.0 SP11 : python-pip (EulerOS-SA-2026-3148)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

EulerOS 2.0 SP13 : golang (EulerOS-SA-2026-2967)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 If a trusted template...