CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1

CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53583 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53583 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53586 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53586 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-66046 affecting package expat for versions less than 2.8.3-2

CVE-2026-66046 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30

CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...

CVE-2026-65819 affecting package telegraf for versions less than 1.31.0-30

CVE-2026-65819 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...

CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1

CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-19589 affecting package packer for versions less than 1.9.5-20

CVE-2026-19589 affecting package packer for versions less than 1.9.5-20. A patched version of the package is available...

npq v3.27.0

NPQ Documentation This directory contains comprehensive documentation for the NPQ Node Package Quality security auditing tool. Core Documentation optional-features.md Configuration and usage of optional security features, including recent improvements and bug fixes. age.marshall.md Detailed...

CVE-2026-44476

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...

UBUNTU-CVE-2026-44476

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...

CVE-2026-16639

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...

CVE-2026-18985

The Edit in-place field module for Drupal (versions 0.0.0 through 2.1.1) is vulnerable to an incorrect authorization issue that allows Forceful Browsing . The root cause is the module's failure to sufficiently verify access rights when editing entities, which could allow a malicious user to craft...

DEBIAN-CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...