CVE-2026-14678 affecting package postgresql for versions less than 16.15-1

CVE-2026-14678 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-16241 affecting package postgresql for versions less than 16.15-1

CVE-2026-16241 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14671 affecting package postgresql for versions less than 16.15-1

CVE-2026-14671 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-6464 affecting package postgresql for versions less than 16.15-1

CVE-2026-6464 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14679 affecting package postgresql for versions less than 16.15-1

CVE-2026-14679 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14673 affecting package postgresql for versions less than 16.15-1

CVE-2026-14673 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-13757 affecting package p11-kit for versions less than 0.26.5-1

CVE-2026-13757 affecting package p11-kit for versions less than 0.26.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63039

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This allows an attacker to inject the string value into the SQL statement, enabling SQL injection. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to...

CVE-2026-63039

CVE-2026-63039 is an SQL injection (CWE-89) in Apache InLong's manager component, specifically in AuditAlertRuleEntityMapper.selectByCondition. The root cause is MyBatis ${} string interpolation of attacker-controlled orderField and orderType fields in the ORDER BY clause, allowing arbitrary SQL ...

EUVD-2026-63397

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...

DEBIAN-CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

CVE-2026-76795 AeternaLabsHQ PullMD REST API Endpoint api server-side request forgery

A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the component REST API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2026-46600 affecting package golang for versions less than 1.26.6-1

CVE-2026-46600 affecting package golang for versions less than 1.26.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1

CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70457 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70457 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73074 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73074 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73075 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73075 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70458 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70458 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-18503 affecting package python3 for versions less than 3.12.14-1

CVE-2026-18503 affecting package python3 for versions less than 3.12.14-1. An upgraded version of the package is available that resolves this issue...

PT-2026-79117

Name of the Vulnerable Software and Affected Versions lin-snow Ech0 versions prior to 5.4.2 Description A security flaw exists in the MD5Encrypt function within the internal/util/crypto/crypto.go file. This issue involves the use of a risky cryptographic algorithm, which could allow for remote...