OPENSUSE-SU-2026:11616-1 python313-geopandas-1.1.4-1.1 on GA media

These are all security issues fixed in the python313-geopandas-1.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

Vinyl Cache: Multiple Vulnerabilities

Background Vinyl Cache is a web application accelerator. Vinyl Cache was previously named Varnish. Description Multiple vulnerabilities have been discovered in Vinyl Cache. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...

CVE-2026-53583 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53583 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-73073 affecting package vim for versions less than 9.2.0976-1

CVE-2026-73073 affecting package vim for versions less than 9.2.0976-1. A patched version of the package is available...

CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1

CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53586 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53586 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-49825 affecting package python-lxml for versions less than 4.9.3-3

CVE-2026-49825 affecting package python-lxml for versions less than 4.9.3-3. A patched version of the package is available...

CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1

CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-66046 affecting package expat for versions less than 2.8.3-2

CVE-2026-66046 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-19589 affecting package packer for versions less than 1.9.5-20

CVE-2026-19589 affecting package packer for versions less than 1.9.5-20. A patched version of the package is available...

CVE-2026-65819 affecting package telegraf for versions less than 1.31.0-30

CVE-2026-65819 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...

CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30

CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...

npq v3.27.0

NPQ Documentation This directory contains comprehensive documentation for the NPQ Node Package Quality security auditing tool. Core Documentation optional-features.md Configuration and usage of optional security features, including recent improvements and bug fixes. age.marshall.md Detailed...

CVE-2026-44476

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...