CLSA-2026-1773015268 TuxCare security update for trim-newlines (1 CVE)

TuxCare rebuilt trim-newlines to address 1 CVE. Fixed in 2.0.0-tuxcare.1...

CLSA-2026-1773101696 TuxCare security update for tough-cookie (3 CVEs)

TuxCare rebuilt tough-cookie to address 3 CVEs. Fixed in 2.2.0-tuxcare.1...

CLSA-2026-1772928826 TuxCare security update for debug (1 CVE)

TuxCare rebuilt debug to address 1 CVE. Fixed in 2.1.1-tuxcare.1...

CLSA-2026-1772496680 TuxCare security update for requests (1 CVE)

TuxCare rebuilt requests to address 1 CVE. Fixed in 2.31.0.post1+tuxcare...

CLSA-2026-1771546208 TuxCare security update for braces (1 CVE)

TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.2-tuxcare.1...

CLSA-2025-1756080325 TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)

TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.5.0-tuxcare.1...

CLSA-2025-1762474004 TuxCare security update for 59 packages (1 CVE)

TuxCare rebuilt 59 packages to address 1 CVE. Fixed in 2.7.3.tuxcare.1...

CLSA-2025-1759795577 TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.7-tuxcare.1...

CLSA-2025-1752019359 TuxCare security update for 58 packages (1 CVE)

TuxCare rebuilt 58 packages to address 1 CVE. Fixed in 2.7.1.tuxcare.1...

CLSA-2025-1751328156 TuxCare security update for 37 packages (1 CVE)

TuxCare rebuilt 37 packages to address 1 CVE. Fixed in 2.3.9.tuxcare.1...

CLSA-2025-1738627240 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18.tuxcare.4...

netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

A flaw was found in Netty, a network application framework. A remote attacker can exploit a vulnerability in the HTTP/2 Hypertext Transfer Protocol version 2 maximum header size handling. By sending a specific SETTINGSMAXHEADERLISTSIZE setting, an attacker can cause Netty to produce an exception...

PYSEC-2026-3559 `datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data

Summary When the Pydantic v2 output mode is in use, datamodel-code-generator reads a validators array from each model entry in the --extra-template-data file and synthesises a Pydantic @fieldvalidator... decorator from each entry. The field names and the validator mode are interpolated into the...

WordPress Travel & Tours Meta Search plugin <= 2.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by CraCkEr in WordPress Plugin Flights & Hotels Booking WP Plugin versions = 2.3...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the HTTP/2 header block handling. An attacker can cause excessive memory consumption by sending specially crafted HTTP/2 requests that bypass memory limits. Remediation A fix was...

CVE-2026-56846

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...

CVE-2026-56846

Node.js HTTP/2 handling flaw (CVE-2026-56846) affects Node.js 24.x and 22.x. The issue allows HTTP/2 retained header blocks to evade maxSessionMemory, enabling remote memory exhaustion. Exploitation details are not provided in the documents. Remediation follows the vendor advisory: apply the July...

EUVD-2026-52564

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...

Linux Distros Unpatched Vulnerability : CVE-2026-47781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins...

CVE-2026-62354 Apache NiFi: Incorrect Authorization for Parameter Context Validation Requests

Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation...