472925 matches found
CLSA-2026-1791200030 TuxCare security update for brace-expansion (2 CVEs)
TuxCare rebuilt brace-expansion to address 2 CVEs. Fixed in 1.1.16-tuxcare.4...
CLSA-2026-1791196167 TuxCare security update for @angular (5 CVEs)
TuxCare rebuilt 15 @angular packages to address 5 CVEs. Fixed in 19.2.25-tuxcare.5...
ROOT-APP-NPM-CVE-2025-68154 CVE-2025-68154 in systeminformation - Patched by Root
Root has patched CVE-2025-68154 in the systeminformation package for Root:npm. Multiple fixed versions available...
CLSA-2026-1791192659 TuxCare security update for @xmldom/xmldom (10 CVEs)
TuxCare rebuilt @xmldom/xmldom to address 10 CVEs. Fixed in 0.9.8-tuxcare.2...
CLSA-2026-1791188247 TuxCare security update for org.apache.httpcomponents (2 CVEs)
TuxCare rebuilt 6 org.apache.httpcomponents packages to address 2 CVEs. Fixed in 4.2.6-tuxcare.2...
CLSA-2026-1791187847 TuxCare security update for werkzeug (2 CVEs)
TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 0.16.1.post1+tuxcare...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2026-105295
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...
CVE-2026-105295 GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypass
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...
EUVD-2026-92159
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...
CVE-2026-105295 GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypass
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...
CVE-2026-105295
GitAhead versions 2.5.0 through 2.7.1 are vulnerable to an insecure update mechanism that fails to perform integrity or signature verification on downloaded updates. Additionally, the application permanently ignores TLS errors after a single SSL error dialog is presented. A network attacker can e...
CVE-2026-105295 GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypass
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...
PT-2026-106032
Plane is an open-source project management tool. Prior to 1.4.0, Plane's project update endpoint authorizes the caller against the workspace slug in the request URL but loads the target project globally by UUID without binding it to that workspace. An administrator of one workspace can modify a...
CVE-2026-95263
Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...
EUVD-2026-92783
Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...
PT-2026-106021
Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update endpoint at /api/workspaces/workspace slug/projects/project id/members/member pk/ to change another user's project role. The role-update logic block...
CVE-2026-104964: Authorization Bypass Through User-Controlled Key
Plane is an open-source project management tool. Prior to 1.4.0, Plane's project update endpoint authorizes the caller against the workspace slug in the request URL but loads the target project globally by UUID without binding it to that workspace. An administrator of one workspace can modify a...
CVE-2026-105295: Download of Code Without Integrity Check
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...
PT-2026-104669
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...