CLSA-2026-1793047049 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 9.2.1-tuxcare.1...

MAL-2026-18333 Malicious code in path-stream-utils-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a028e4ea3039755f4b18b003e2d9722722ca96c51652674dd1bb27f375e4d0 The package self-describes as a 'Temporary package placeholder for staged publishing' package.json stub:true, README 'Temporary Holding Version' but...

Malware in path-stream-utils-testmetest

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in path-stream-utils-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a028e4ea3039755f4b18b003e2d9722722ca96c51652674dd1bb27f375e4d0 The package self-describes as a 'Temporary package placeholder for staged publishing' package.json stub:true, README 'Temporary Holding Version' but...

Malicious code in birch-css-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22815f068ecaf85065c389553848537859f9e37623285a9e71b3e81ee9e9b685 Package advertises itself as a zero-runtime CSS theme kit and instructs installation as a Tailwind name-overlay npm install -D...

Malware in birch-css-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18331 Malicious code in birch-css-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22815f068ecaf85065c389553848537859f9e37623285a9e71b3e81ee9e9b685 Package advertises itself as a zero-runtime CSS theme kit and instructs installation as a Tailwind name-overlay npm install -D...

CLSA-2026-1793023448 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.12.0-tuxcare.1...

CLSA-2026-1793022219 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.8.0-tuxcare.1...

CLSA-2026-1793021479 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.6.5-tuxcare.1...

CLSA-2026-1793020728 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.9.1-tuxcare.1...

CLSA-2026-1793019970 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 7.10.0-tuxcare.2...

SUSE-SU-2026:24435-1 Security update for cifs-utils

This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932...

CLSA-2026-1793018204 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.9.0-tuxcare.1...

xz: XZ Utils: Denial of Service via buffer overflow in index decoding

A flaw was found in XZ Utils. When the lzmaindexdecoder function processes an empty index, and a subsequent lzmaindexappend operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service DoS for affected systems...

PT-2026-123148

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load param in txt of the file python/src/nnabla/utils/cli/encode decode param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to laun...

ALSA-2026:89749 Moderate: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ Utils:...

PT-2026-123149

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func set nnabla version decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in...

CLSA-2026-1792937883 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 6.0.9-tuxcare.1...

SUSE SLES12 Security Update : cifs-utils (SUSE-SU-2026:4897-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4897-1 advisory. This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc128493...