PT-2026-37176

Name of the Vulnerable Software and Affected Versions LiteLLM versions 1.80.5 through 1.83.6 Description The 'POST /prompts/test' endpoint accepts user-supplied prompt templates and renders them without sandboxing. An authenticated user with a valid proxy API key can provide a crafted template to...

PT-2026-103643

Уязвимость системы управления тестированием ПО Test IT связана с недостаточной проверкой запросов на стороне сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, осуществить SSRF-атаку...

golang security update

1.25.9-3 - Do not ignore any tests in check 1.25.9-2 - Skip terminal test in container 1.25.9-1 - Update to Go 1.25.9 fips-2...

buildah security update

1.41.8-3.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.41.8-3 - rebuild for CVE-2026-34986 - Resolves: RHEL-165027...

PT-2026-103644

Уязвимость системы управления тестированием ПО Test IT связана с применением входных данных с внешним управлением для выбора классов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольные команды...

Malicious code in test-pkg-jie (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc409f90d96c576263a60bd95ab30260b973097425292cdd53999e49cb3c4011 During installation, the package attempts to create a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

SUSE CVE-2026-31526

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs processbpfexitfull passes checklock = !curframe to checkresourceleak, which is false in cases when bpfthrow is called from a static subprog. This makes checkresourceleak to skip...

Keras 3.13.0 Safe Parallel ML Stress Test Generator

This script is a safe and lightweight stress-testing utility designed to simulate machine learning model generation workloads without actually allocating large memory or creating real heavy files. It was designed to test Keras 3.13.0...

Strategic Heterogeneous Multi-Agent Architecture for Cost-Effective Code Vulnerability Detection

Automated code vulnerability detection is critical for software security, yet existing approaches face a fundamental trade-off between detection accuracy and computational cost. We propose a heterogeneous multi-agent architecture inspired by game-theoretic principles, combining cloud-based LLM...

@nocobase/actions (>=2.0.0-alpha.2, <=2.0.38), @nocobase/auth (>=2.0.0-alpha.2, <=2.0.38) +4 more potentially affected by CVE-2026-41640 via @nocobase/database (>=2.0.0-alpha.2, <=2.0.38)

@nocobase/database NPM version =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.38 Source cves: CVE-2026-41640 Source advisory: OSV:GHSA-4948-F92Q-F432...

@nocobase/actions (>=2.0.0-alpha.2, <=2.0.38), @nocobase/auth (>=2.0.0-alpha.2, <=2.0.38) +4 more potentially affected by CVE-2026-41640 via @nocobase/database (>=2.0.0-alpha.2, <=2.0.38)

@nocobase/database NPM version =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.38 Source cves: CVE-2026-41640 Source advisory: SNYK:JS-NOCOBASEDATABASE-16421470...

K2view vs Broadcom For Test Data Management

Compare Broadcom TDM and K2view across architecture, integration, masking, and scalability to find the right test data management solution for your needs...

EUVD-2026-24889

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nciclosedevice nciclosedevice flushes rxwq and txwq while holding reqlock. This causes a circular locking dependency because ncirxwork running on rxwq can end up taking reqlock too:...

EUVD-2026-24798

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix paramctx leak on damonsysfsnewtestctx failure Patch series "mm/damon/sysfs: fix memory leak and NULL dereference issues", v4. DAMONSYSFS can leak memory under allocation failure, and do NULL pointer dereferenc...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.3.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.3.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.11.2)

org.apache.camel:camel-infinispan MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.3.0 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (>=2.8.0, <=2.9.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=2.8.0, <=2.9.0) +3 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.16.0)

org.apache.camel:camel-infinispan MAVEN version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =2.8.0, =2.8.0, =2.8.0, =2.9.0 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.10.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.10.0) +3 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.17.0)

org.apache.camel:camel-infinispan MAVEN version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.10.0 -...

org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector (3.18.1), org.apache.camel.kafkaconnector:camel-infinispan-source-kafka-connector (3.18.1) +4 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.1)

org.apache.camel:camel-infinispan MAVEN version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector 3.18.1 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.7.1), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.7.1) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.14.2)

org.apache.camel:camel-infinispan MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.7.1 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.11.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.11.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.0)

org.apache.camel:camel-infinispan MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.11.0 -...