474465 matches found
CVE-2026-105859 Payload: Unauthorized update to collection documents
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...
CVE-2026-105859
The headless content management system Payload contains a vulnerability in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . An attacker can submit a request to a specific update endpoint to modify collection documents because the system fails to enforce collection or field-leve...
NPM: Payload didn't enforce field-level password update restrictions
NPM: Payload didn't enforce field-level password update restrictions vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
CLSA-2026-1791296249 TuxCare security update for org.springframework.data (3 CVEs)
TuxCare rebuilt 5 org.springframework.data packages to address 3 CVEs. Fixed in 3.1.10.RELEASE-tuxcare.1...
CLSA-2026-1791293888 TuxCare security update for simple-git (2 CVEs)
TuxCare rebuilt simple-git to address 2 CVEs. Fixed in 3.36.0-tuxcare.1...
[SECURITY] [DLA 4825-1] suricata-update security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4825-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 06, 2026 https://wiki.debian.org/LTS -...
CLSA-2026-1791290323 TuxCare security update for lodash (3 CVEs)
TuxCare rebuilt lodash to address 3 CVEs. Fixed in 2.3.0-tuxcare.1...
CLSA-2026-1791289714 TuxCare security update for seroval (1 CVE)
TuxCare rebuilt seroval to address 1 CVE. Fixed in 1.5.6-tuxcare.1...
CLSA-2026-1791289094 TuxCare security update for org.springframework (31 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1...
ROOT-APP-PYPI-CVE-2026-34518 CVE-2026-34518 in aiohttp - Patched by Root
Root has patched CVE-2026-34518 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1791281018 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.14...
ROOT-OS-DEBIAN-11-CVE-2026-34000 CVE-2026-34000 in xorg-server - Patched by Root
Root has patched CVE-2026-34000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-34003 CVE-2026-34003 in xorg-server - Patched by Root
Root has patched CVE-2026-34003 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...
CLSA-2026-1791278813 TuxCare security update for flatted (1 CVE)
TuxCare rebuilt flatted to address 1 CVE. Fixed in 2.0.0-tuxcare.1...
CVE-2026-98269
In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...
CVE-2026-98269
In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...
CVE-2026-98269 btrfs: abort transaction on failure to update inode for hole punching and reflinking
In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...
CLSA-2026-1791273474 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.2.post12+tuxcare...