CVE-2026-22997 affecting package kernel for versions less than 5.15.200.1-1

CVE-2026-22997 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CLSA-2026-1771112524 Update of alt-php

Update ca-certificates database to 20260129: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "GlobalSign Root CA" Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Comodo AAA...

CVE-2025-14459 affecting package kubevirt for versions less than 1.7.0-1

CVE-2025-14459 affecting package kubevirt for versions less than 1.7.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-71088 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71088 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS

Impact A Cross-site Scripting XSS vulnerability has been identified in the handling of webhook responses and related HTTP endpoints. Under certain conditions, the Content Security Policy CSP sandbox protection intended to isolate HTML responses may not be applied correctly. An authenticated user...

CVE-2025-68307 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-68307 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-41251

@sap-cloud-sdk/core contains the core functionality of the SAP Cloud SDK as well as the SAP Business Technology Platform abstractions. This affects applications on SAP Business Technology Platform that use the SAP Cloud SDK and enabled caching of destinations. In affected versions and in some...

CVE-2022-23611

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade...

CVE-2025-14180 affecting package php for versions less than 8.1.34-1

CVE-2025-14180 affecting package php for versions less than 8.1.34-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68113

CVE-2025-68113 (ALTCHA) describes a cryptographic semantic binding flaw in ALTCHA libraries where the HMAC does not unambiguously bind challenge parameters to the nonce, enabling potential replay of previously solved challenges depending on server-side handling. Affected components include ALTCHA...

CVE-2025-68113 ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

ALTCHA is privacy-first software for captcha and bot protection. A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters to the nonce, allowing an attacker to...

CVE-2025-40280 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40280 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40297 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40297 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40019 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40019 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-37842 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-37842 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

EUVD-2023-2607

Malicious code in bioql PyPI...

CVE-2025-39763 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39763 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38439 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38439 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38577 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38577 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...