ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +4543 more potentially affected by CVE-2026-73508 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.15.final)

io.netty:netty-codec-dns MAVEN version =4.2.0.alpha1, =0.4.0, =0.4.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =1.8.1 and more Source cves: CVE-2026-73508 Source advisory: SNYK:JAVA-IONETTY-18854645...

Update 28.2 for Microsoft Dynamics 365 Business Central 2026 Release Wave 1 (Application Build 28.2.51034, Platform Build 28.0.50938)

None None...

Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 (Application Build 27.8.50894, Platform Build 27.0.50789)

None None...

Update 26.14 for Microsoft Dynamics 365 Business Central 2025 Release Wave 1 (Application Build 26.14.50858, Platform Build 26.0.50788)

None None...

CVE-2026-68228 media: chips-media: wave5: Move src_buf Removal to finish_encode

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...

CVE-2026-68228

The CVE-2026-68228 entry concerns the Linux kernel media subsystem (chips-media wave5 encoder). A race condition allows a buffer to be marked as DONE while it has not yet been removed from the m2m ready queue, because an IRQ path can return the buffer to userspace via v4l2_m2m_buf_done before sta...

CVE-2026-19387

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

CVE-2026-19387

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

MAL-2026-13066 Malicious code in boxy-maker-wave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e064a8b2cd4e63ee24471673e5ac8f3cfb9ffae86a7e05eae7562395c3716b4 On require of the package, index.js loads platform.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from Cloudfla...

Malicious code in boxy-maker-wave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e064a8b2cd4e63ee24471673e5ac8f3cfb9ffae86a7e05eae7562395c3716b4 On require of the package, index.js loads platform.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from Cloudfla...

Zero-Day Remediation Meets Operational Resiliency

Executive Summary In the Frontier AI era, the number of CISA-known exploited vulnerabilities has increased by 6.5x over the past four years, and time-to-exploitation has collapsed to -7 days. Traditional monthly patch cycles cannot keep up. Organizations need a new operating model that detects at...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.6) +5204 more potentially affected by CVE-2026-56819 via io.netty:netty-codec-http2 (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-http2 MAVEN version =4.2.0.final, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-56819 Source advisory: OSV:GHSA-93WV-JW9V-4972...

CLEANSTART-2026-AU77950 Security fixes in wave 0.11.0-r3

Package wave version 0.11.0-r3 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-KL95933 Security fixes in wave-fips 0.8.0-r1

Package wave-fips version 0.8.0-r1 fixes 4 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-4v7x-pqxf-cx7m, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-XE10992 Security fixes in wave 1.13.1-r0

Package wave version 1.13.1-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-VE32460 Security fixes in wave 0.10.0-r1

Package wave version 0.10.0-r1 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-ZY13204 Security fixes in wave-fips 0.7.2-r1

Package wave-fips version 0.7.2-r1 fixes 4 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-4v7x-pqxf-cx7m, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-QZ94315 Security fixes in wave-fips 0.9.0-r1

Package wave-fips version 0.9.0-r1 fixes 4 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-4v7x-pqxf-cx7m, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw...

CLEANSTART-2026-NU97479 Security fixes in wave 0.10.0-r0

Package wave version 0.10.0-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...

CLEANSTART-2026-GF99050 Security fixes in wave-fips 0.10.0-r1

Package wave-fips version 0.10.0-r1 fixes 9 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-68121, CVE-2025-61728, CVE-2025-68119...