CLSA-2026-1771602192 libsoup: Fix of 8 CVEs

CVE-2026-1761: fix memory corruption when parsing multipart HTTP responses - CVE-2026-0719: fix integer overflow in NTLM authentication when processing excessively long passwords - added upstream tests for CVE-2024-52531, CVE-2025-32914, CVE-2025-4948 - merged CVE-2025-2784 and CVE-2025-32053 -...

📄 GnuTLS X.509 Name Constraints Denial of Service

This program is a multi-threaded test application created to analyze the impact of excessive X.509 Name Constraints processing in vulnerable versions of GnuTLS CVE-2025-14831. It generates a configurable certificate chain and attaches a very large number of Name Constraints and Subject Alternativ...

exploit-surge-radar

Exploit Surge Radar Detect exploit-active vulnerability surge...

Fedora 42 : roundcubemail (2026-d684b372f1)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d684b372f1 advisory. Release 1.6.13 - Managesieve: Fix handling of string-list format values for date tests in Out of Office 10075 - Fix remote image blocking bypass via SVG...

PT-2026-31920

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.11 Description A flaw in the proxy server allows remote attackers to execute arbitrary code via bytecode rewriting. The issue exists because the POST /guardrails/test custom code endpoint runs user-supplied Pytho...

aiexec-base (0.6.4), ano-code (>=0.1.6, <=0.1.11) +38 more potentially affected by CVE-2026-27025 via pypdf (5.1.0)

pypdf PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiexec-base 0.6.4 - ano-code =0.1.6, =0.0.1, =1.0.0, =0.6.0, =0.0.3, =0.1.0, =0.3.1, =3.3.6, =1.0.16, =0.2.37, =1.0.0, =0.1.11, =0.1.24 and more Sourc...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.491), org.jenkins-ci.main:jenkins-war (1.491) +6 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.491)

org.jenkins-ci.main:jenkins-core MAVEN version 1.491 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.491 - org.jenkins-ci.main:jenkins-war 1.491 -...

org.jenkins-ci.main:jenkins-test-harness (1.493), org.jenkins-ci.main:jenkins-war (1.493) +3 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.493)

org.jenkins-ci.main:jenkins-core MAVEN version 1.493 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.493 - org.jenkins-ci.main:jenkins-war 1.493 -...

org.jenkins-ci.main:jenkins-test-harness (1.494), org.jenkins-ci.main:jenkins-war (1.494) +9 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.494)

org.jenkins-ci.main:jenkins-core MAVEN version 1.494 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.494 - org.jenkins-ci.main:jenkins-war 1.494 -...

org.jenkins-ci.main:jenkins-test-harness (1.495), org.jenkins-ci.main:jenkins-war (1.495) +6 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.495)

org.jenkins-ci.main:jenkins-core MAVEN version 1.495 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.495 - org.jenkins-ci.main:jenkins-war 1.495 -...

org.jenkins-ci.main:jenkins-test-harness (1.496), org.jenkins-ci.main:jenkins-war (1.496) +3 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.496)

org.jenkins-ci.main:jenkins-core MAVEN version 1.496 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.496 - org.jenkins-ci.main:jenkins-war 1.496 -...

com.exxeta.jenkins.plugins:sidebar-update-notification (>=1.0.1, <=1.1.0), jp.shiftinc.jenkins.plugins:discard-old-build (>=1.0.3, <=1.03) +11 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.500)

org.jenkins-ci.main:jenkins-core MAVEN version 1.500 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.exxeta.jenkins.plugins:sidebar-update-notification =1.0.1, =1.0.3, =2.6, =0.0.5, =0.2.0...

org.jenkins-ci.main:jenkins-test-harness (1.501), org.jenkins-ci.main:jenkins-war (1.501) +5 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.501)

org.jenkins-ci.main:jenkins-core MAVEN version 1.501 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.501 - org.jenkins-ci.main:jenkins-war 1.501 -...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), org.jenkins-ci.main:jenkins-test-harness (1.503) +5 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.503)

org.jenkins-ci.main:jenkins-core MAVEN version 1.503 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =1.15, =1.17 - org.jenkins-ci.plugins:plugin...

org.jenkins-ci.main:jenkins-test-harness (1.505), org.jenkins-ci.main:jenkins-war (1.505) +6 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.505)

org.jenkins-ci.main:jenkins-core MAVEN version 1.505 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.505 - org.jenkins-ci.main:jenkins-war 1.505 -...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.1.0, <=1.1.3), org.jenkins-ci.main:jenkins-test-harness (1.506) +4 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.506)

org.jenkins-ci.main:jenkins-core MAVEN version 1.506 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.1.0, =1.1.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.476), org.jenkins-ci.main:jenkins-war (1.476) +4 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.476)

org.jenkins-ci.main:jenkins-core MAVEN version 1.476 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.476 - org.jenkins-ci.main:jenkins-war 1.476 -...

org.jenkins-ci.main:jenkins-test-harness (1.477), org.jenkins-ci.main:jenkins-war (1.477) +7 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.477)

org.jenkins-ci.main:jenkins-core MAVEN version 1.477 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.477 - org.jenkins-ci.main:jenkins-war 1.477 -...

com.flowdock.jenkins:jenkins-flowdock-plugin (1.0.7), org.jenkins-ci.main:jenkins-test-harness (1.478) +5 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.478)

org.jenkins-ci.main:jenkins-core MAVEN version 1.478 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin 1.0.7 - org.jenkins-ci.main:jenkins-test-harness...