CVE-2026-53586 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53586 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1

CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53584 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53583 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53583 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

CVE-2026-76641 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-73073 affecting package vim for versions less than 9.2.0976-1

CVE-2026-73073 affecting package vim for versions less than 9.2.0976-1. A patched version of the package is available...

CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1

CVE-2026-73194 affecting package perl-DBI for versions less than 1.652-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2

CVE-2026-53585 affecting package libgit2 for versions less than 1.7.2-2. A patched version of the package is available...

CVE-2026-49825 affecting package python-lxml for versions less than 4.9.3-3

CVE-2026-49825 affecting package python-lxml for versions less than 4.9.3-3. A patched version of the package is available...

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30

CVE-2026-54332 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...

CVE-2026-19589 affecting package packer for versions less than 1.9.5-20

CVE-2026-19589 affecting package packer for versions less than 1.9.5-20. A patched version of the package is available...

CVE-2026-65819 affecting package telegraf for versions less than 1.31.0-30

CVE-2026-65819 affecting package telegraf for versions less than 1.31.0-30. A patched version of the package is available...

npq v3.27.0

NPQ Documentation This directory contains comprehensive documentation for the NPQ Node Package Quality security auditing tool. Core Documentation optional-features.md Configuration and usage of optional security features, including recent improvements and bug fixes. age.marshall.md Detailed...

UBUNTU-CVE-2026-44476

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...

CVE-2026-44476

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...

CVE-2026-16639

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...

CVE-2026-18985

The Edit in-place field module for Drupal (versions 0.0.0 through 2.1.1) is vulnerable to an incorrect authorization issue that allows Forceful Browsing . The root cause is the module's failure to sufficiently verify access rights when editing entities, which could allow a malicious user to craft...