478305 matches found
CLSA-2026-1792525281 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792525284 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792525283 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792525280 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document
Summary @apostrophecms/import-export's update-by-key feature lets an imported document carry a :key property for example slug:key whose value is used to find an existing document to update instead of inserting a new one. getUpdateKey/insertOrUpdateDocWithKey lib/methods/import.js use that value...
GHSA-JQW5-W6H3-44G6 ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document
Summary @apostrophecms/import-export's update-by-key feature lets an imported document carry a :key property for example slug:key whose value is used to find an existing document to update instead of inserting a new one. getUpdateKey/insertOrUpdateDocWithKey lib/methods/import.js use that value...
CLSA-2026-1792518696 TuxCare security update for @babel/plugin-transform-logical-assignment-operators (1 CVE)
TuxCare rebuilt @babel/plugin-transform-logical-assignment-operators to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792518697 TuxCare security update for @babel/plugin-transform-logical-assignment-operators (1 CVE)
TuxCare rebuilt @babel/plugin-transform-logical-assignment-operators to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792518040 TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 36 org.springframework.integration packages to address 10 CVEs. Fixed in 5.4.6-tuxcare.1...
CLSA-2026-1792518003 TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 36 org.springframework.integration packages to address 10 CVEs. Fixed in 5.5.12-tuxcare.1...
CLSA-2026-1792516124 TuxCare security update for @babel/highlight (1 CVE)
TuxCare rebuilt @babel/highlight to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
CLSA-2026-1792516120 TuxCare security update for @babel/highlight (1 CVE)
TuxCare rebuilt @babel/highlight to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792516112 TuxCare security update for @babel/highlight (1 CVE)
TuxCare rebuilt @babel/highlight to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
CLSA-2026-1792514589 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
Keycloak authorization issue vulnerability
Keycloak has an authorization issue vulnerability. This occurs when, within a domain, the mandatory “Update User Locale” operation is configured before the “Configure OTP” operation. As a result, the system fails to enforce multi-factor authentication during login, potentially allowing attackers...
Agent2Agent A2A Rust SDK race condition vulnerability
The Agent2Agent A2A Rust SDK versions 0.4.0, 0.4.1, 0.4.2, 0.4.3, and 0.4.4 have a race condition vulnerability. This vulnerability stems from improper handling of the InMemoryTaskStore::update function in the file a2a-server/src/taskstore/inmemory.rs. It may lead to race conditions, and remote...
CLSA-2026-1792510080 TuxCare security update for @babel/plugin-proposal-optional-catch-binding (2 CVEs)
TuxCare rebuilt @babel/plugin-proposal-optional-catch-binding to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...