CVE-2026-14198

@fastify/middie versions 9.1.0 through 9.3.2 decode the encoded slash %2F inside path parameter values before matching middleware paths, while Fastify's underlying router preserves the encoding during route lookup. The two layers disagree on the canonical request path, so the middleware fails to...

CGA-3PCV-5QRM-4QFV

Bulletin has no description...

SUSE-SU-2026:22437-1 Security update for openssl-3

This update for openssl-3 fixes the following issue - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption bsc1266350...

WordPress Video Gallery – YouTube Gallery, Playlist & Video Grid plugin <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call vulnerability

Authenticated Subscriber+ Arbitrary Function Call vulnerability discovered by PRISM in WordPress Plugin YouTube Showcase versions = 4.0.3...

CVE-2026-14191

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...

EUVD-2026-40882

UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme rfbUltraVNCMsLogonIIAuth. In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer DHMAXBITS controls the prime size. A 64-bit DH key can be brok...

CVE-2026-57995

creationtimestamp| type| source ---|---|--- 2026-07-01 03:27:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkl57ndiv2d 2026-07-01 22:01:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjf7tzov2i 2026-07-01 22:01:50+00:00| seen|...

EUVD-2026-40869

An out-of-bounds heap write exists in the RAR5 recovery-volume .rev parser in WinRAR and UnRAR RecVolumes5::ReadHeader in recvol5.cpp. The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated again...

CVE-2026-54903

creationtimestamp| type| source ---|---|--- 2026-07-01 02:33:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpki3ots7t24 2026-07-01 22:02:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjgpngw626 2026-07-02 01:17:01+00:00| seen|...

CVE-2026-54897

creationtimestamp| type| source ---|---|--- 2026-07-01 02:10:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgsi5gey2v 2026-07-01 21:55:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmizrwebj2o 2026-07-02 01:14:03+00:00| seen|...

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-54896

creationtimestamp| type| source ---|---|--- 2026-07-01 01:55:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkfxmo5vk26 2026-07-01 22:02:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjfxrnov2i 2026-07-02 01:16:16+00:00| seen|...

[SECURITY] Fedora 43 Update: vmod-querystring-2.0.3-11.fc43

The purpose of this module is to give you a fine-grained control over a URL's query-string in Varnish Cache. It's possible to remove the query-string, clean it, sort its parameters or filter it to only keep a subset of them. This can greatly improve your hit ratio and efficiency with Varnish,...

[SECURITY] Fedora 43 Update: varnish-modules-0.26.0-4.fc43

This is a collection of modules "vmods" extending Varnish VCL used for describing HTTP request/response policies with additional capabilities. This collection contains the following vmods: bodyaccess, header, saintmode, tcp, var, vsthrottle, xkey...

UBUNTU-CVE-2026-54902

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, is vulnerable to Use-After-Free when in SAJ mode. The Oj::Parser does not protect cached object keys ≥ 35 bytes from garbage collection, and a Ruby callback that triggers GC inside hashend ca...

UBUNTU-CVE-2026-54592

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.3, Oj::Doceachchild, when invoked recursively over a deeply nested JSON document, overflows a fixed-size stack buffer and aborts the process, leading to DoS. In a two-step chain in...

AlmaLinux 9 : ruby:3.3 (ALSA-2026:33576)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:33576 advisory. ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol...

PT-2026-54618

Name of the Vulnerable Software and Affected Versions NEX-Forms – Ultimate Forms Plugin for WordPress versions prior to 9.2.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting. This occurs via the name array...

PT-2026-55087

Impact The QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificate, so verify was effectively a no-op on the client. A...

PT-2026-55209

Name of the Vulnerable Software and Affected Versions Concourse versions prior to 8.2.3 Description An open redirect issue exists in the login flow. An attacker can craft a URL that redirects users from the Concourse web server to an external site, which could be utilized in phishing attacks to...