8806 matches found
CLSA-2026-1793137245 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.20-tuxcare.2...
CLSA-2026-1793137156 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.1-tuxcare.2...
CLSA-2026-1793136993 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.6-tuxcare.2...
CLSA-2026-1793136969 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.5-tuxcare.2...
MGASA-2026-0556 Updated cifs-utils package fixes a security vulnerability
cifs-utils 4.2-7.8 mount-option injection in mount.cifs. CVE-2026-104715...
Updated cifs-utils package fixes a security vulnerability
cifs-utils 4.2-7.8 mount-option injection in mount.cifs. CVE-2026-104715...
CLSA-2026-1793127450 TuxCare security update for org.codehaus.plexus:plexus-utils (2 CVEs)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 2 CVEs. Fixed in 3.0.8-tuxcare.1...
Malware in @flexmr/utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
Summary An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertexaicredentials value to /utils/transformrequest. The request-body safety blocklist rejected vertexcredentials but missed its alias vertexaicredentials, which let the value...
CLSA-2026-1793113298 TuxCare security update for @graphql-tools/utils (1 CVE)
TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 10.11.0-tuxcare.1...
CLSA-2026-1793113090 TuxCare security update for @graphql-tools/utils (1 CVE)
TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 12.0.0-tuxcare.1...
xz security update
An update is available for xz. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list XZ Utils is an integrated collection of user-space file compression utilities base...
RLSA-2026:89749 Moderate: xz security update
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ Utils:...
CLSA-2026-1793098698 TuxCare security update for @graphql-tools/utils (1 CVE)
TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 11.2.2-tuxcare.2...
PT-2026-125875
🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...
XZ Utils 5.6.1 Backdoor Detection / Mitigation
An Ansible role and Python tool detect backdoored XZ Utils versions and liblzma libraries associated with CVE-2024-3094, back up affected files, upgrade supported distribution packages, and optionally restart sshd...
PT-2026-125878
🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...
PT-2026-125876
🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...
PT-2026-125877
🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...