CVE-2026-75005

Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count routes. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue...

SUSE CVE-2026-74754

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

CVE-2026-75005: Inefficient Algorithmic Complexity

Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count routes. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue...

AZL-97791 CVE-2026-74754 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

UBUNTU-CVE-2026-74754

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

CVE-2026-74754

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

CVE-2026-74754 scsi: core: pair EH runtime PM get and put

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

CVE-2026-74754 scsi: core: pair EH runtime PM get and put

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

CVE-2026-74754

CVE-2026-74754 is a race condition in the Linux kernel SCSI core. The shost->eh_noresume flag is consulted twice per error-handling (EH) iteration—once before scsi_autopm_get_host() and once before scsi_autopm_put_host(). If a power-management path (e.g., ufshcd_set_dev_pwr_mode()) flips this ...

CVE-2026-74754: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

PT-2026-82134

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SCSI core error handling EH process. The system checks the shost-eh noresume variable twice during a single error handling iteration: once before calling...

Linux Distros Unpatched Vulnerability : CVE-2026-74754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once...

GO-2026-6262 OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu

OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu...

EUVD-2026-54678

JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login...

jupyterhub-usage-quotas (>=0.1.3, <=0.1.5), keycloakauthenticator (>=4.0.5, <=4.0.13) +5 more potentially affected by CVE-2026-54338 via jupyterhub (>=5.0.0b2, <=5.4.6)

jupyterhub PYPI version =5.0.0b2, =0.1.3, =4.0.5, =0.1.0, =1.0.11, =1.0.3, =1.2.37, =0.1.4, =0.1.7 Source cves: CVE-2026-54338 Source advisory: GHSA-P43P-WHWX-Q52H...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 3.3 to 7.2 contain security vulnerabilities. These vulnerabilities stem from a race condition that occurs during the iterative handling of SCSI EH errors, where shost-ehnoresume is checked repeatedly, potentially leading to undercounting of PM usage counts during...

Missing Authentication for Critical Function

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

CVE-2026-12600

CVE-2026-12600 is a denial-of-service vulnerability in the JPEG2000 (JPX) decoder within a Poppler fork maintained by Innodata Labs . The flaw resides in JPXStream::readCodestream(), where attacker-controlled values from the SIZ segment (e.g., img.nComps) are used to allocate memory for tiles and...

PT-2026-82017

OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers in github.com/opentofu/opentofu...

GHSA-4PH6-MJV7-3FQ6 netfoil vulnerable to improper handling of untrusted DoH response data

Summary HTTPS RR data returned from the DoH server was not properly handled. Unverified APLN data which could contain arbitrary byte sequences was written directly to the log. It could also cause unnecessary memory usage. The single-byte response code was also written directly to the log...