CVE-2026-98269 btrfs: abort transaction on failure to update inode for hole punching and reflinking

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...

CLSA-2026-1791273474 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.0.2.post12+tuxcare...

CLSA-2026-1791272714 TuxCare security update for pyjwt (2 CVEs)

TuxCare rebuilt pyjwt to address 2 CVEs. Fixed in 2.8.0.post5+tuxcare...

CLSA-2026-1791272123 TuxCare security update for django (3 CVEs)

TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.post17+tuxcare...

CLSA-2026-1791271338 TuxCare security update for pyjwt (7 CVEs)

TuxCare rebuilt pyjwt to address 7 CVEs. Fixed in 2.3.0.post4+tuxcare...

CVE-2026-25272

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

EUVD-2026-92974

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

CVE-2026-25272

A Memory Corruption vulnerability exists in the camera CRE driver due to improper handling of buffer limits during hardware update preparation. This Out-of-bounds Write (CWE-787) allows for potential high impact on confidentiality, integrity, and availability. The vulnerability requires high priv...

CVE-2026-25272 Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

CVE-2026-89289 Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint

The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...

CVE-2026-89289 Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST Endpoint

The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...

CVE-2026-89289

The Fast Courier WordPress plugin (versions

WordPress Fast Courier plugin <= 5.2.3 - Unauthenticated Order Fulfillment Update vulnerability

Unauthenticated Order Fulfillment Update vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Fast Courier versions = 5.2.3...

CLSA-2026-1791266024 TuxCare security update for dulwich (4 CVEs)

TuxCare rebuilt dulwich to address 4 CVEs. Fixed in 0.25.2.post7+tuxcare...

CLSA-2026-1791265304 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.2.post11+tuxcare...

CVE-2026-105621

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...

ROOT-APP-NPM-CVE-2026-54311 CVE-2026-54311 in n8n - Patched by Root

Root has patched CVE-2026-54311 in the n8n package for Root:npm. Multiple fixed versions available...

CVE-2026-105621

The software jishenghua jshERP (versions up to 3.5) contains an improper authorization vulnerability within the Financial Receipt Update Handler component. Specifically, the updateAccountHeadAndDetail function in the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java allow...