GHSA-RRR3-5825-8CG8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F5W7-VPJF-RMJJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4875-WJV5-3WM4 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-14136 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-13979 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: sonarqube, keycloak-config-cli, trino, kserve-modelmesh, zookeeper, cassandra-reaper, nextflow, apache-nifi, apache-nifi-registry, thingsboard, akhq, sonar-scanner-cli, cassandra, management-api-for-apache-cassandra-5.0...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: xeol, grype, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, restic, crossplane-provider-aws-route53, kubewatch, docker-compose, cloud-provider-azure, loki, helm-push, tempo, apache-exporter, kubernetes-csi-external-attacher, step-kms-plugin,...

Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System

Summary Due to use of Golang Go multiple vulnerabilities affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2026-39827 DESCRIPTION: An authenticated SSH client that repeatedly opened channels which were rejected by the server...

USN-8525-1: curl vulnerabilities

Harry Sintonen discovered that curl incorrectly handled credentials when following HTTP redirects in conjunction with .netrc files. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS...

SUSE-SU-2026:2832-1 Security update for rustup

This update for rustup fixes the following issues Security issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249008. - CVE-2026-41676: openssl: Deriver:derive and...

Important: Red Hat Security Advisory: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Security update for rust-keylime

This update for rust-keylime fixes the following issues Update to version 0.2.9+49. Update openssl to 0.10.81. CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270174. CVE-2026-41677: openssl: out-of-bounds read in PEM password callback...

MGASA-2026-0239 Updated ack packages fix security vulnerabilities

This update fixes several security vulnerabilities...

Updated ack packages fix security vulnerabilities

This update fixes several security vulnerabilities...

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 29, 2026 to July 5, 2026)

Last week, there were 289 vulnerabilities disclosed in 205 WordPress Plugins and 41 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 130 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

CVE-2026-11827

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o...

GHSA-MG7H-Q7HW-M596 vulnerabilities

Vulnerabilities for packages: linux-aws...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.22. Vulnerability Details CVEID:CVE-2025-68161...

USN-8522-1: LibRaw vulnerabilities

It was discovered that LibRaw incorrectly handled certain Nikon RAW image files. An attacker could possibly use this issue to cause LibRaw to crash, resulting in a denial of service. CVE-2026-5342 It was discovered that LibRaw had an integer overflow in its DNG image loader. An attacker could...

Summer of Clearinghouses

Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it — built quietly months earlier, heads down, taking findings and shipping fixes, because...