478711 matches found
CLSA-2026-1788988321 TuxCare security update for morgan (1 CVE)
TuxCare rebuilt morgan to address 1 CVE. Fixed in 1.6.1-tuxcare.3...
CVE-2026-87013
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/id/update/parent allowed a user to place a folder under itself or one of its descendants, while the folder tree walks used by DELETE /api/v1/folders/id and POST...
CLSA-2026-1788980919 TuxCare security update for xmldom (5 CVEs)
TuxCare rebuilt xmldom to address 5 CVEs. Fixed in 0.6.0-tuxcare.4...
CLSA-2026-1788978264 TuxCare security update for svgo (2 CVEs)
TuxCare rebuilt svgo to address 2 CVEs. Fixed in 2.8.0-tuxcare.3...
CLSA-2026-1788978124 TuxCare security update for svgo (2 CVEs)
TuxCare rebuilt svgo to address 2 CVEs. Fixed in 4.0.2-tuxcare.1...
CLSA-2026-1788978110 TuxCare security update for nodemailer (1 CVE)
TuxCare rebuilt nodemailer to address 1 CVE. Fixed in 9.1.0-tuxcare.1...
RLSA-2026:65534 Important: image-builder security update
A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Certificat...
CLSA-2026-1788976685 TuxCare security update for nodemailer (3 CVEs)
TuxCare rebuilt nodemailer to address 3 CVEs. Fixed in 0.7.1-tuxcare.2...
CLSA-2026-1788976472 TuxCare security update for vite (1 CVE)
TuxCare rebuilt vite to address 1 CVE. Fixed in 6.4.2-tuxcare.2...
CLSA-2026-1788976179 TuxCare security update for vite (2 CVEs)
TuxCare rebuilt vite to address 2 CVEs. Fixed in 7.3.2-tuxcare.1...
CLSA-2026-1788974290 TuxCare security update for league/commonmark (4 CVEs)
TuxCare rebuilt league/commonmark to address 4 CVEs. Fixed in 2.7.1-p3+tuxcare...
CLSA-2026-1788973862 TuxCare security update for league/commonmark (4 CVEs)
TuxCare rebuilt league/commonmark to address 4 CVEs. Fixed in 2.8.2-p3+tuxcare...
CLSA-2026-1788973403 TuxCare security update for drupal/spamspan (1 CVE)
TuxCare rebuilt drupal/spamspan to address 1 CVE. Fixed in 3.2.0-p1+tuxcare...
CLSA-2026-1788972898 TuxCare security update for drupal/gdpr (1 CVE)
TuxCare rebuilt drupal/gdpr to address 1 CVE. Fixed in 3.1.0-p1+tuxcare...
CLSA-2026-1788972447 TuxCare security update for drupal/link (1 CVE)
TuxCare rebuilt drupal/link to address 1 CVE. Fixed in 7.1.13-p1+tuxcare...
CLSA-2026-1788971869 TuxCare security update for drupal/gdpr (1 CVE)
TuxCare rebuilt drupal/gdpr to address 1 CVE. Fixed in 7.1.0-p1+tuxcare...
CLSA-2026-1788971215 TuxCare security update for drupal/spamspan (1 CVE)
TuxCare rebuilt drupal/spamspan to address 1 CVE. Fixed in 7.1.4-p1+tuxcare...
SUSE-SU-2026:4112-1 Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. - hasCredentials requires both username AND password to be non-empty bsc1273242. - GPG Key hints in repoindex.xml...
CVE-2026-82563
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...