CLSA-2026-1774743810 TuxCare security update for form-data (3 CVEs)

TuxCare rebuilt form-data to address 3 CVEs. Fixed in 0.0.8-tuxcare.1...

CLSA-2026-1774225199 TuxCare security update for yargs-parser (3 CVEs)

TuxCare rebuilt yargs-parser to address 3 CVEs. Fixed in 4.2.1-tuxcare.1...

CLSA-2026-1774225180 TuxCare security update for uglify-js (3 CVEs)

TuxCare rebuilt uglify-js to address 3 CVEs. Fixed in 1.3.5-tuxcare.1...

CLSA-2026-1774225198 TuxCare security update for yargs-parser (3 CVEs)

TuxCare rebuilt yargs-parser to address 3 CVEs. Fixed in 10.1.0-tuxcare.1...

CLSA-2026-1774052360 TuxCare security update for angular (2 CVEs)

TuxCare rebuilt angular to address 2 CVEs. Fixed in 1.5.11-tuxcare.4...

CLSA-2026-1774398069 TuxCare security update for serialize-javascript (3 CVEs)

TuxCare rebuilt serialize-javascript to address 3 CVEs. Fixed in 1.9.1-tuxcare.1...

CLSA-2026-1774225196 TuxCare security update for yargs-parser (3 CVEs)

TuxCare rebuilt yargs-parser to address 3 CVEs. Fixed in 7.0.0-tuxcare.1...

CLSA-2026-1774311649 TuxCare security update for ua-parser-js (3 CVEs)

TuxCare rebuilt ua-parser-js to address 3 CVEs. Fixed in 0.7.21-tuxcare.1...

CLSA-2026-1774225207 TuxCare security update for diff (3 CVEs)

TuxCare rebuilt diff to address 3 CVEs. Fixed in 7.0.0-tuxcare.1...

CLSA-2026-1772410261 TuxCare security update for pillow (3 CVEs)

TuxCare rebuilt pillow to address 3 CVEs. Fixed in 9.4.0.post2+tuxcare...

CLSA-2026-1772064638 TuxCare security update for xmlhttprequest-ssl (3 CVEs)

TuxCare rebuilt xmlhttprequest-ssl to address 3 CVEs. Fixed in 1.5.5-tuxcare.1...

CLSA-2026-1771546203 TuxCare security update for ini (3 CVEs)

TuxCare rebuilt ini to address 3 CVEs. Fixed in 1.3.5-tuxcare.1...

CLSA-2025-1767053309 TuxCare security update for ch.qos.logback (3 CVEs)

TuxCare rebuilt 4 ch.qos.logback packages to address 3 CVEs. Fixed in 1.4.14-tuxcare.1...

CLSA-2025-1766534902 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.27-tuxcare.2...

CLSA-2024-1733443231 TuxCare security update for com.fasterxml.woodstox:woodstox-core (1 CVE)

TuxCare rebuilt com.fasterxml.woodstox:woodstox-core to address 1 CVE. Fixed in 5.0.3.tuxcare...

PYSEC-2026-3552 cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Summary pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which disclosed the exact length recovered from the RSA operation. The same distinction was also observable by timing. An...

CVE-2026-15721

creationtimestamp| type| source ---|---|--- 2026-08-04 10:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cjbyppr37r6vy 2026-08-04 13:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msb2z7pf2r2e 2026-08-04 13:34:04+00:00| seen|...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

Security Bulletin:Catastrophic Backtracking Vulnerability in path-to-regexp with Three or More Parameters

Summary Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period .. For example, /:a-:b-:c or /:a-:b-:c-:d. The backtrack protection added in [email protected] only prevents ambiguity for two...

CVE-2026-18754

creationtimestamp| type| source ---|---|--- 2026-08-04 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msanlkacge2l 2026-08-04 09:54:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/befdrlvqqqlb5 2026-08-04 13:32:06+00:00| seen|...