Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: fixed the issue with preserving cleanup for reflinks. The commit c06c303832ec “ocfs2: fixed the error where xattr array entries were not properly handled” does not handle all cases, and the cleanup of preserved xattr...

CVE-2026-43168 ocfs2: fix reflink preserve cleanup issue

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec "ocfs2: fix xattr array entry countedby error" doesn't handle all cases and the cleanup job for preserved xattr entries still has bug: - the 'last' pointer should be...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: py3-xet-core, ntpd-rs, linkerd-extension-init, uv, rye, linkerd-network-validator, ztunnel, zizmor, qdrant, kdash, zellij, wasmtime, rustup, samply, atuin, lychee, shadowsocks-rust, linkerd2, zola, buck2, cargo-audit, wasm-pack, parseable, tealdeer, sqlx, pixi,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: py3-xet-core, ntpd-rs, linkerd-extension-init, uv, rye, linkerd-network-validator, ztunnel, zizmor, qdrant, kdash, zellij, wasmtime, rustup, samply, atuin, lychee, shadowsocks-rust, linkerd2, zola, buck2, cargo-audit, wasm-pack, parseable, tealdeer, sqlx, pixi,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, lakekeeper, ntpd-rs, zellij, zola, wasmtime, qdrant, rustup, wasm-pack, ztunnel-fips, sqlx, linkerd2-cni-plugin, garage, ztunnel, linkerd2, parseable, sccache, asciinema, kdash, py3-xet-core, komodo, atuin, lychee, deno, cargo-audit, mise,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, lakekeeper, ntpd-rs, zellij, zola, wasmtime, qdrant, rustup, wasm-pack, ztunnel-fips, sqlx, linkerd2-cni-plugin, garage, ztunnel, linkerd2, parseable, sccache, asciinema, kdash, py3-xet-core, komodo, atuin, lychee, deno, cargo-audit, mise,...

MINI-8X86-32FX-24XH

Bulletin has no description...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: py3-xet-core, nushell, ntpd-rs, oranda, linkerd-extension-init, uv, rye, linkerd-network-validator, ztunnel, zizmor, qdrant, kdash, zellij, zed, wasmtime, rustup, samply, atuin, lychee, shadowsocks-rust, linkerd2, zola, buck2, cargo-audit, wasm-pack, parseable, pgcat...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: nushell, linkerd2-proxy, ntpd-rs, zellij, zed, zola, wasmtime, qdrant, rustup, wasm-pack, ztunnel-fips, rustls-ffi, sqlx, linkerd2-cni-plugin, garage, sdp-k8s-injector, ztunnel, linkerd2, parseable, pgcat, sccache, asciinema, kdash, py3-xet-core, komodo, atuin, lyche...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: py3-xet-core, nushell, uv, zizmor, qdrant, zed, samply, lychee, zola, cargo-audit, wadm, parseable, pixi, wasmcloud, wash, sccache, berg, vector, xh...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: py3-xet-core, nushell, uv, zizmor, qdrant, zed, samply, lychee, zola, cargo-audit, wadm, parseable, pixi, wasmcloud, wash, sccache, berg, vector, xh...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: nushell, zed, apollo-router, zola, qdrant, garage, parseable, sccache, asciinema, py3-xet-core, wash, komodo, lychee, wadm, cargo-audit, fnm, pixi, xh, uv, wasmcloud, vector, samply, zizmor, berg...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: nushell, zed, apollo-router, zola, qdrant, garage, parseable, sccache, asciinema, py3-xet-core, wash, komodo, lychee, wadm, cargo-audit, fnm, pixi, xh, uv, wasmcloud, vector, samply, zizmor, berg...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

Summary: CVE-2026-2663 affects Alixhan xh-admin-backend v1.0–1.7.0 (unknown exact initial versions) due to vulnerable handling in the Database Query Handler for the endpoint /frontend-api/system-service/api/system/role/query, where argument manipulation enables SQL injection. This reportedly allo...

GHSA-R6V5-FH4H-64XC vulnerabilities

Vulnerabilities for packages: py3-xet-core, geckodriver, nushell, oranda, yazi, uutils, uv, starship, rye, ztunnel, zizmor, cargo-c, qdrant, kdash, cedar, zellij, zed, eza, samply, atuin, lychee, shadowsocks-rust, zola, buck2, cargo-audit, wadm, wasm-pack, parseable, sqlx, rust-analyzer, pixi, ba...

CVE-2026-25727 vulnerabilities

Vulnerabilities for packages: py3-xet-core, geckodriver, nushell, oranda, yazi, uutils, uv, starship, rye, ztunnel, zizmor, cargo-c, qdrant, kdash, cedar, zellij, zed, eza, samply, atuin, lychee, shadowsocks-rust, zola, buck2, cargo-audit, wadm, wasm-pack, parseable, sqlx, rust-analyzer, pixi, ba...