sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591

Impact A number of vulnerabilities, two rated as "High" severity using CVSSv4, have been discovered and fixed in the upstream libvips dependency. Those processing untrusted input with versions of sharp prior to 0.35.0 are affected. Patches Using prebuilt binaries provided by sharp? Most people re...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the processing of xDS RBAC policies and HTTP/2 transport handling. An attacker can gain unauthorized access to protected services or cause denial of service by exploiting improper handling of unsupported field...

CVE-2026-61312

...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple Netty vulnerabilities (CVE-2026-45673, CVE-2026-45674, CVE-2026-47691)

Summary Netty is used by IBM UrbanCode Deploy UCD for network communication. CVE-2026-45673, CVE-2026-45674, CVE-2026-47691. Vulnerability Details CVEID:CVE-2026-45673 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions...

CVE-2026-61145

CVE-2026-61145 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) in version 11.4.0. An unauthenticated attacker with network access via HTTP can compromise these components, potentially taking over the Guided Search/Experience Manag...

CVE-2026-60832

CVE-2026-60832 affects Oracle Interaction Blending (Oracle E-Business Suite, Internal Operations) in versions 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker over a network via RMI, potentially allowing unauthorized update/insert/delete and read access to Oracle In...

CVE-2026-60784

CVE-2026-60784 affects Oracle E-Business Suite, Oracle Trading Community, Party Search UI. Affected versions are 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access via HTTP to compromise Oracle Trading Community, potentially causing unauthorized creation, delet...

CVE-2026-60683

CVE-2026-60683 affects Oracle E-Business Suite’s Oracle Process Manufacturing Regulatory Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The issue allows a low-privilege, unauthenticated or network-reachable attacker to compromise the Regulatory Management module v...

CVE-2026-60665

...

CVE-2026-60658

CVE-2026-60658 is an Oracle WebCenter Content (Content Server) vulnerability in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Content, with user interaction required. Su...

CVE-2026-60489

CVE-2026-60489 affects Oracle JD Edwards EnterpriseOne CRM Foundation (component: CRM Foundation), with the affected product version stated as 9.2. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, and successful exploitation can lead to takeover of JD Edwards...

CVE-2026-60490

...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is is susceptible to multiple Netty vulnerabilities CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585

Summary Netty is used by IBM DevOps Deploy / IBM UrbanCode Deploy UCD for network communication. CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585. Vulnerability Details CVEID:CVE-2026-42580 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to...

CVE-2026-47056

...

CVE-2026-47017

...

DEBIAN-CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-94PJ-82F3-465W vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-J3F2-48V5-CCWW vulnerabilities

Vulnerabilities for packages: thingsboard-fips, vitess, opentelemetry-auto-instrumentations-node, nemo, homepage, pulumi, jitsucom-jitsu, kubeflow-centraldashboard, cadence-web, librechat, kibana, langfuse-fips...