23739 matches found
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers
A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-of-service DoS condition where the affected server or clien...
CVE-2026-70471 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetche...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.2-0.2.hum1 aarch64, x8664 prometheus3.13-3.13.2-0.2.hum1.src src Security Fixes: prometheus3.13: CVE-2026-69153...
EUVD-2026-52751
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise's HTTP security module httpSecurity.ts did not normalize IPv4-mapped IPv6 addresses such as ::ffff:127.0.0.1 and ::ffff:169.254.169.254 before checking them against the deny list...
CLSA-2026-1785468081 TuxCare security update for lodash-es (3 CVEs)
TuxCare rebuilt lodash-es to address 3 CVEs. Fixed in 4.17.21-tuxcare.1...
CLSA-2026-1785814692 TuxCare security update for org.springframework.security (3 CVEs)
TuxCare rebuilt 18 org.springframework.security packages to address 3 CVEs. Fixed in 6.0.8-tuxcare.1...
CLSA-2026-1785727932 TuxCare security update for org.apache.logging.log4j (3 CVEs)
TuxCare rebuilt 33 org.apache.logging.log4j packages to address 3 CVEs. Fixed in 2.17.2-tuxcare.2...
CLSA-2026-1785204346 TuxCare security update for webpack-dev-server (3 CVEs)
TuxCare rebuilt webpack-dev-server to address 3 CVEs. Fixed in 2.7.1-tuxcare.4...
CLSA-2026-1785380498 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 6 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.2...
CLSA-2026-1785291983 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 19 org.springframework.security packages to address 1 CVE. Fixed in 6.4.3-tuxcare.7...
CLSA-2026-1785204347 TuxCare security update for karma (2 CVEs)
TuxCare rebuilt karma to address 2 CVEs. Fixed in 1.5.0-tuxcare.1...
CLSA-2026-1785204336 TuxCare security update for karma (2 CVEs)
TuxCare rebuilt karma to address 2 CVEs. Fixed in 1.7.0-tuxcare.1...
CLSA-2026-1784943105 TuxCare security update for estree-util-value-to-estree (1 CVE)
TuxCare rebuilt estree-util-value-to-estree to address 1 CVE. Fixed in 1.3.0-tuxcare.1...
CLSA-2026-1784943410 TuxCare security update for axios (2 CVEs)
TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.26.1-tuxcare.2...
CLSA-2026-1784943208 TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 0.2.6-tuxcare.1...
CLSA-2026-1784856385 TuxCare security update for 2 packages (3 CVEs)
TuxCare rebuilt 2 packages to address 3 CVEs. Fixed in 8.3.3-tuxcare.2...
CLSA-2026-1784769609 TuxCare security update for qs (3 CVEs)
TuxCare rebuilt qs to address 3 CVEs. Fixed in 6.7.0-tuxcare.2...