112429 matches found
image-builder security update
An update is available for image-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A local binary for building customized OS artifacts such as VM images a...
image-builder security update
An update is available for image-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A local binary for building customized OS artifacts such as VM images a...
RLSA-2026:9044 Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: net/url:...
RLSA-2026:13671 Important: image-builder security update
A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For more details about the security issues, including the impact, a CVSS score,...
osbuild-composer security update
An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...
CVE-2026-43497
creationtimestamp| type| source ---|---|--- 2026-05-21 16:17:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmesyzrc762t 2026-07-06 06:15:06+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 07:28:33+00:00| seen...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to insufficient validation in url.Parse [CVE-2026-25679]
Summary IBM Watson Speech Services Cartridge is vulnerable to insufficient validation in url.Parse, which may cause acceptance of some invalid URLs CVE-2026-25679. url.Parse is used in our speech utilities. This vulnerabilitiy has been addressed. Please read the details for remediation below...
MAL-2026-4405 Malicious code in @lokuma/cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ea692229343873d930161e52d11be25bab87d4a00e942ceb18c1751f0f7586 The update subcommand of this CLI executes curl -fsSL | bash where the URL is...
Malicious code in ihubinternal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d05496a74a52542f8bf237430ae41377eb71e3710b41abfcc1f7b5cf3642885 The package exports a VelocityAuth function that, when called by integrating applications, sends end-user Solana wallet public keys, signed...
CVE-2026-45255
creationtimestamp| type| source ---|---|--- 2026-05-21 13:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmeizefluf2k...
CVE-2026-5434
creationtimestamp| type| source ---|---|--- 2026-05-21 13:01:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmei3zkwn62t...
CVE-2026-7837
creationtimestamp| type| source ---|---|--- 2026-05-21 12:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmehnbdbf42t 2026-06-01 00:01:25+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmn3osk2o...
CVE-2026-45252
creationtimestamp| type| source ---|---|--- 2026-05-21 12:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmegy5obdd2n...
CVE-2026-45254
creationtimestamp| type| source ---|---|--- 2026-05-21 12:40:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmegvcyo7f2c...
CVE-2026-39461
creationtimestamp| type| source ---|---|--- 2026-05-21 12:38:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmegsms3st2p...
CVE-2026-8685
creationtimestamp| type| source ---|---|--- 2026-05-21 12:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmegguekof2h...
CVE-2026-8486
creationtimestamp| type| source ---|---|--- 2026-05-21 12:25:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmeg2efjkj27...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the integration action URL process. An attacker can execute arbitrary API calls with system administrator privileges by exploiting path traversal in the integration action URL when authenticated with a...
CVE-2026-44072
creationtimestamp| type| source ---|---|--- 2026-05-21 10:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmeavuv4hk2c 2026-06-01 00:01:28+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmpbzkd2n...