CVE-2026-61338

creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mry4pcuyk525...

CVE-2026-60426

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-31 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrvswy4non2l...

[SECURITY] [DSA 6398-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6398-1 [email protected] https://www.debian.org/security/ Alberto Garcia July 23, 2026 https://www.debian.org/security/faq -...

@12-apps/app-shell (>=1.0.0, <=4.0.0), @12-apps/auth (>=1.2.0, <=1.22.0) +280 more potentially affected by unknown CVE via @auth/core (>=0.0.0-manual.fdbc96ab, <=0.41.2)

@auth/core NPM version =0.0.0-manual.fdbc96ab, =1.0.0, =1.2.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =0.2.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-AUTHCORE-18306842...

DEBIAN-CVE-2026-65914

DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper...

GHSA-8WHX-365G-H9VV vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

GHSA-9WJQ-CP2P-HRGF vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

GHSA-CJ75-F6XR-R4G7 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

GHSA-V56Q-MH7H-F735 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, vitess, nextcloud-server...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: rancher-api-ui, vitess, nextcloud-server...

SUSE-SU-2026:22917-1 Security update for afterburn

This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2022-24713: regex: high complexity when parsing regexes with large repetitions on empty sub-expressions can lead to DoS bsc1196972. - CVE-2024-12224: idna: privilege escalatio...

USN-8597-1 linux-ibm-5.15 vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

GHSA-CJ75-F6XR-R4G7 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, pghero, ruby3.2-rails, ruby3.3-rails, pghero-fips, ruby4.0-rails...

CVE-2026-59879 vulnerabilities

Vulnerabilities for packages: nextcloud-server, keep-fips, arangodb, authentik-fips, vitess, authentik, rancher-api-ui, keep...

GHSA-2F96-G7MH-G2HX vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, opal, checkov, datahub-ingestion, mlflow, awx...

GHSA-956X-8GVW-WG5V vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, opal, checkov, datahub-ingestion, mlflow, awx...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, opal, checkov, datahub-ingestion, mlflow, awx...

GHSA-V2HH-GCRM-F6HX vulnerabilities

Vulnerabilities for packages: langfuse-fips, gitlab-rails-ce-fips, wazuh-dashboard, opensearch-dashboards-fips, tileserver-gl-fips, nextcloud-server, arangodb, unleash-fips, gitlab-rails-ce, unleash, vitess, langfuse, keep, prism, librechat, keep-fips, renovate, argo-workflows,...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, aws-privateca-issuer, cert-manager-istio-csr, step-issuer, mariadb-operator, kuberay-operator, percona-server-mongodb-operator, cert-manager-csi-driver, cert-manager-webhook-pdns...