Astra Linux – Vulnerability in Git

Git is a revision control system. Before versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, feeding specially crafted input to git apply --reject could cause a path outside the working tree to be overwritten with partially controlled contents...

lblfixer_cve_2023_30839

LabelGrup Networks, official PrestaShop Partner Module for PrestaShop 1.7.8.9 to fix CVE-2023-30545, CVE-2023-30839 and CVE-2023-30839 vulnerabilities For further information, check the following links: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-30545 CVE:...

EUVD-2026-42968

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover...

netty-http-check

netty-http-check 针对 14 个io.netty:netty-codec-http CVE（2025–2026）的离线检查工具。 告诉你实际暴露于哪些漏洞——以及能一次性清除所有漏洞的单一版本： 4.1.137.Final / 4.2.17.Final，这个版本号在十四份安全公告中任何一份 都未提及。 CVE-2025-58056 · CVE-2025-67735 · CVE-2026-33870 · CVE-2026-41417 · CVE-2026-42580 · CVE-2026-42581 · CVE-2026-42585 · CVE-2026-42587 ·...

CVE-2026-61712 affecting package moby-engine for versions less than 25.0.3-20

CVE-2026-61712 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...

CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63385 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63385 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CLEANSTART-2026-KP84275 Security fixes in weaviate-fips 1.38.11-r2

Package weaviate-fips version 1.38.11-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

EUVD-2026-42297

Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances...

CVE-2026-81722

nltk PorterStemmer in versions = 3.10.2 fixed in 3.10.3 contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem. The isconsonant helper walks backward over the entire run of trailing 'y' characters on every call, and measure invokes it for each stem position, causin...

EUVD-2026-42395

Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript...

EUVD-2026-53582

praisonaiagents has a webcrawl SSRF protection bypass via unchecked redirect targets...

CVE-2026-64652 affecting package gh for versions less than 2.97.0-1

CVE-2026-64652 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14673 affecting package postgresql for versions less than 16.15-1

CVE-2026-14673 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

CVE-2026-70462 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70462 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1

CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73070 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73070 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...