CVE-2026-59844 affecting package libssh for versions less than 0.10.6-9

CVE-2026-59844 affecting package libssh for versions less than 0.10.6-9. A patched version of the package is available...

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2. A patched version of the package is available...

CVE-2026-50012 affecting package squid for versions less than 6.13-5

CVE-2026-50012 affecting package squid for versions less than 6.13-5. A patched version of the package is available...

CVE-2026-56289 affecting package patch for versions less than 2.7.6-10

CVE-2026-56289 affecting package patch for versions less than 2.7.6-10. A patched version of the package is available...

CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6

CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6. A patched version of the package is available...

CVE-2025-46327 affecting package telegraf for versions less than 1.31.0-27

CVE-2025-46327 affecting package telegraf for versions less than 1.31.0-27. A patched version of the package is available...

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27. A patched version of the package is available...

CVE-2026-64533 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64533 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68107 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68107 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68294 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68294 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68414 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68414 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64562 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64562 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68425 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68425 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64554 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64554 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-47718

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. When secureEnabled=true, FUXA 1.3.0-2773 still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue...

CVE-2026-47717 FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue...

EUVD-2026-57598

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...

CVE-2026-73491

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: URIs whose scheme is split or prefixed with the HTML5 named whitespace character...