CLSA-2026-1781225624 TuxCare security update for cryptography (2 CVEs)

TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 45.0.7.post3+tuxcare...

CLSA-2026-1781052745 TuxCare security update for laminas/laminas-diactoros (1 CVE)

TuxCare rebuilt laminas/laminas-diactoros to address 1 CVE. Fixed in 2.22.0-p1+tuxcare...

CLSA-2026-1779324461 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.5...

CLSA-2026-1779238049 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 3.7.3-tuxcare.1...

CLSA-2026-1778805969 TuxCare security update for lodash (1 CVE)

TuxCare rebuilt lodash to address 1 CVE. Fixed in 1.3.1-tuxcare.2...

CLSA-2026-1778028254 TuxCare security update for axios (1 CVE)

TuxCare rebuilt axios to address 1 CVE. Fixed in 0.18.1-tuxcare.2...

CLSA-2026-1776386124 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 17 @angular packages to address 1 CVE. Fixed in 18.2.14-tuxcare.7...

CLSA-2026-1775781158 TuxCare security update for 123 packages (1 CVE)

TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 10.0.29.tuxcare0001...

CLSA-2026-1775089643 TuxCare security update for webpack (1 CVE)

TuxCare rebuilt webpack to address 1 CVE. Fixed in 5.76.1-tuxcare.1...

CLSA-2026-1775089656 TuxCare security update for pdfjs-dist (1 CVE)

TuxCare rebuilt pdfjs-dist to address 1 CVE. Fixed in 3.11.174-tuxcare.1...

CLSA-2026-1774570946 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.9.0-tuxcare.1...

CLSA-2026-1773879456 TuxCare security update for cryptography (1 CVE)

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 45.0.7.post1+tuxcare...

CLSA-2026-1773447386 TuxCare security update for loader-utils (1 CVE)

TuxCare rebuilt loader-utils to address 1 CVE. Fixed in 0.2.17-tuxcare.1...

CLSA-2025-1764288754 TuxCare security update for starlette (1 CVE)

TuxCare rebuilt starlette to address 1 CVE. Fixed in 0.13.6.post1+tuxcare...

CLSA-2025-1763943127 TuxCare security update for idna (1 CVE)

TuxCare rebuilt idna to address 1 CVE. Fixed in 2.10.post1+tuxcare...

CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

CVE-2026-47746

CVE-2026-47746 affects Misskey (open source federated social platform). Affected versions are 12.37.0 and later, up to but not including 2026.5.4. The issue is a TOCTOU vulnerability in timing attacks during JSON-LD signature validation and the JSON-LD compaction process, caused by a non-shared p...

CVE-2026-46713 Misskey: JSON-LD signature validation + compaction may lead to improper activity handling

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and compaction process that allows spoofed activities to be accepted as valid. This issue has been fixed in version 2026.5.4...

CVE-2026-69185 Socket.IO: Zero-attachment Memory Exhaustion

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory...

CVE-2026-48031

Technical details about CVE-2026-48031 are not publicly provided in the supplied documents. The go-base JWT-secret issue is described at a high level; monitor for updates for concrete affected versions, root cause, and fixes.