dev.dsf:dsf-fhir-server-jetty (1.8.0), dev.dsf:dsf-tools-test-data-generator (1.8.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.8.0)

dev.dsf:dsf-fhir-server MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.8.0 - dev.dsf:dsf-tools-test-data-generator 1.8.0 Source cves: CVE-2026-40939...

dev.dsf:dsf-fhir-server-jetty (1.2.0-rc1), dev.dsf:dsf-tools-test-data-generator (1.2.0-rc1) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.2.0-rc1)

dev.dsf:dsf-fhir-server MAVEN version 1.2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.2.0-rc1 - dev.dsf:dsf-tools-test-data-generator 1.2.0-rc1 Source cves:...

dev.dsf:dsf-fhir-server-jetty (1.1.0), dev.dsf:dsf-tools-test-data-generator (1.1.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.1.0)

dev.dsf:dsf-fhir-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.1.0 - dev.dsf:dsf-tools-test-data-generator 1.1.0 Source cves: CVE-2026-40939...

dev.dsf:dsf-fhir-server-jetty (1.5.1), dev.dsf:dsf-tools-test-data-generator (1.5.1) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.5.1)

dev.dsf:dsf-fhir-server MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.5.1 - dev.dsf:dsf-tools-test-data-generator 1.5.1 Source cves: CVE-2026-40939...

dev.dsf:dsf-fhir-server-jetty (1.3.0), dev.dsf:dsf-tools-test-data-generator (1.3.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (1.3.0)

dev.dsf:dsf-fhir-server MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-fhir-server and may be impacted: - dev.dsf:dsf-fhir-server-jetty 1.3.0 - dev.dsf:dsf-tools-test-data-generator 1.3.0 Source cves: CVE-2026-40939...

EUVD-2025-209475

In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that are granted as part of the fixed role "Contact Point Writer", which is part of the basic role Editor - can edit...

CVE-2025-12141

In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that are granted as part of the fixed role "Contact Point Writer", which is part of the basic role Editor - can edit...

CVE-2025-12141 Grafana Alerting Editors can edit destination of webhooks they did not create

In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that are granted as part of the fixed role "Contact Point Writer", which is part of the basic role Editor - can edit...

CVE-2025-12141

CVE-2025-12141 affects Grafana Alerting: users with edit permissions on a contact point (alert.notifications:write or alert.notifications.receivers:test) granted via the fixed role Contact Point Writer within the Editor role can modify destinations of contact points created by others. An attacker...

CVE-2025-12141 Grafana Alerting Editors can edit destination of webhooks they did not create

In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that are granted as part of the fixed role "Contact Point Writer", which is part of the basic role Editor - can edit...

PT-2026-33063

Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description In the alerting system, users with specific edit permissions for a contact point, such as alert.notifications:write or alert.notifications.receivers:test granted via the Contact Point Writer...

MAL-2026-2669 Malicious code in ant-mcp-proxy-for-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 51df3beb4457da4a841727c91a2517ba5727c841c08f9d43cf2b25be9e476564 During use of the package, it silently downloads and executes remote executables or scripts. During analysis, the remote resources were no longer available. Th...

CVE-2026-33715

Chamilo LMS “CVE-2026-33715” affects version 2.0-RC.2 where public/main/inc/ajax/install.ajax.php is accessible without authentication, bypassing global.inc.php authentication and installation-completed checks. The test_mailer action accepts an arbitrary Symfony Mailer DSN from POST data and uses...

CVE-2026-33456

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

CVE-2026-40217

A flaw was found in LiteLLM. A remote attacker can exploit this flaw by performing bytecode rewriting at the /guardrails/testcustomcode URI. This could lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. Mitigation Mitigation for this issue is...

CVE-2026-31420

A flaw was found in the Linux kernel's bridge subsystem, specifically within the Multiple Registration Protocol MRP implementation. A local user can exploit this vulnerability by supplying a zero-value test interval through the netlink interface without proper validation. This invalid input cause...

EUVD-2026-21944

In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic brmrpstarttest and brmrpstartintest accept the user-supplied interval value from netlink without validation. When interval is 0, usecstojiffies0 yields 0, causing the...

CVE-2026-31420

In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic brmrpstarttest and brmrpstartintest accept the user-supplied interval value from netlink without validation. When interval is 0, usecstojiffies0 yields 0, causing the...

UBUNTU-CVE-2026-31420

In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic brmrpstarttest and brmrpstartintest accept the user-supplied interval value from netlink without validation. When interval is 0, usecstojiffies0 yields 0, causing the...

CVE-2026-31420

CVE-2026-31420 affects Linux kernel bridge MRP interval handling. Vulerability arises when br_mrp_start_test/br_mrp_start_in_test accept a user-supplied interval from netlink with no validation; if interval is 0, the delay becomes zero and a tight loop can exhaust memory, causing an OOM kernel pa...