166786 matches found
Astra Linux – Vulnerability in Composer
Composer is a dependency manager for PHP. On the 2.x branch, before versions 2.2.24 and 2.7.7, the composer install command executed within a Git/HG repository with specially crafted branch names could lead to command injection. This required cloning untrusted repositories. Patches are available ...
Astra Linux – Vulnerability in Thunderbird
When requesting an OpenPGP key from a WKD server, an incorrect padding size was used, which could allow a network observer to determine the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when temporary file creation failed in ReadSFWImage coders/sfw.c, readinfo was destroyed before its filename member could be accessed. This caused a NULL pointe...
ROOT-APP-MAVEN-CVE-2026-55470 CVE-2026-55470 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root
Root has patched CVE-2026-55470 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-33180 CVE-2026-33180 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root
Root has patched CVE-2026-33180 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-26318 CVE-2026-26318 in systeminformation - Patched by Root
Root has patched CVE-2026-26318 in the systeminformation package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-26280 CVE-2026-26280 in systeminformation - Patched by Root
Root has patched CVE-2026-26280 in the systeminformation package for Root:npm. Multiple fixed versions available...
Security Bulletin:IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data
Summary WmServiceMock is bundled with IBM webMethods Integration Server. Fixes are now available. Remediation steps are provided below CVE-2026-12118 Vulnerability Details CVEID:CVE-2026-12118 DESCRIPTION: IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote...
ROOT-APP-NPM-CVE-2025-13204 CVE-2025-13204 in expr-eval - Patched by Root
Root has patched CVE-2025-13204 in the expr-eval package for Root:npm. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-25681 CVE-2026-25681 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-25681 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-42506 CVE-2026-42506 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-42506 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-42502 CVE-2026-42502 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-42502 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-39821 CVE-2026-39821 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-39821 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-33814 CVE-2026-33814 in golang.org/x/net - Patched by Root
Root has patched CVE-2026-33814 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-23307 CVE-2022-23307 in log4j:log4j - Patched by Root
Root has patched CVE-2022-23307 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-23302 CVE-2022-23302 in log4j:log4j - Patched by Root
Root has patched CVE-2022-23302 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2021-4104 CVE-2021-4104 in log4j:log4j - Patched by Root
Root has patched CVE-2021-4104 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2019-17571 CVE-2019-17571 in log4j:log4j - Patched by Root
Root has patched CVE-2019-17571 in the log4j:log4j package for Root:Maven. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-59733 CVE-2026-59733 in github.com/rclone/rclone - Patched by Root
Root has patched CVE-2026-59733 in the github.com/rclone/rclone package for Root:Go. Multiple fixed versions available...