GO-2025-3678 vulnerabilities

Vulnerabilities for packages: kdash, qdrant, deno, sqlx, zed, shadowsocks-rust, rye, wadm, linkerd2-proxy, atuin, rustup, linkerd-extension-init, parseable, samply, sdp-k8s-injector, xh, buck2, cargo-audit, sccache, ntpd-rs, zizmor, oranda, wasmtime, wasm-pack, pixi, rustls-ffi, wasmcloud, zola,...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: fixed the issue with preserving cleanup for reflinks. The commit c06c303832ec “ocfs2: fixed the error where xattr array entries were not properly handled” does not handle all cases, and the cleanup of preserved xattr...

GHSA-4W2J-M93H-CJ5J vulnerabilities

Vulnerabilities for packages: komodo, zola, garage, berg, cargo-audit, pixi, asciinema, sccache, xh, deno...

GHSA-4W2J-M93H-CJ5J vulnerabilities

Vulnerabilities for packages: cargo-audit, berg, sccache, pixi, zola, deno, xh...

CVE-2026-43168 ocfs2: fix reflink preserve cleanup issue

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec "ocfs2: fix xattr array entry countedby error" doesn't handle all cases and the cleanup job for preserved xattr entries still has bug: - the 'last' pointer should be...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: kdash, py3-xet-core, qdrant, linkerd-network-validator, deno, sqlx, shadowsocks-rust, rye, linkerd2, linkerd2-proxy, atuin, rustup, linkerd-extension-init, parseable, samply, sdp-k8s-injector, ztunnel, xh, buck2, cargo-audit, sccache, ntpd-rs, zizmor, zellij, wasmtim...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: kdash, py3-xet-core, qdrant, linkerd-network-validator, deno, sqlx, shadowsocks-rust, rye, linkerd2, linkerd2-proxy, atuin, rustup, linkerd-extension-init, parseable, samply, sdp-k8s-injector, ztunnel, xh, buck2, cargo-audit, sccache, ntpd-rs, zizmor, zellij, wasmtim...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, atuin, samply, sentry-cli, komodo, mise, ztunnel-fips, wasmcloud, berg, buck2, kdash, wasmtime, rye, py3-xet-core, sccache, sdp-k8s-injector, zizmor, sqlx, ntpd-rs, zellij, linkerd-extension-init, cargo-audit, lakekeeper, rustup, tealdeer,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, atuin, samply, sentry-cli, komodo, mise, ztunnel-fips, wasmcloud, berg, buck2, kdash, wasmtime, rye, py3-xet-core, sccache, sdp-k8s-injector, zizmor, sqlx, ntpd-rs, zellij, linkerd-extension-init, cargo-audit, lakekeeper, rustup, tealdeer,...

MINI-8X86-32FX-24XH

Bulletin has no description...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: kdash, py3-xet-core, qdrant, linkerd-network-validator, deno, sqlx, zed, shadowsocks-rust, rye, linkerd2, linkerd2-proxy, atuin, rustup, linkerd-extension-init, parseable, samply, sdp-k8s-injector, ztunnel, xh, pgcat, buck2, cargo-audit, sccache, ntpd-rs, zizmor,...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: rustls-ffi, linkerd2-cni-plugin, pgcat, atuin, samply, sentry-cli, komodo, mise, ztunnel-fips, wasmcloud, berg, buck2, kdash, wasmtime, rye, py3-xet-core, sccache, sdp-k8s-injector, zizmor, sqlx, ntpd-rs, nushell, zellij, linkerd-extension-init, zed, cargo-audit,...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: py3-xet-core, vector, qdrant, zed, wadm, parseable, samply, xh, cargo-audit, sccache, zizmor, berg, pixi, wasmcloud, zola, nushell, lychee, uv, wash...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: py3-xet-core, vector, qdrant, zed, wadm, parseable, samply, xh, cargo-audit, sccache, zizmor, berg, pixi, wasmcloud, zola, nushell, lychee, uv, wash...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: apollo-router, samply, wadm, komodo, wasmcloud, berg, wash, py3-xet-core, sccache, zizmor, vector, nushell, zed, cargo-audit, fnm, zola, garage, lychee, qdrant, uv, pixi, asciinema, parseable, xh...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: apollo-router, samply, wadm, komodo, wasmcloud, berg, wash, py3-xet-core, sccache, zizmor, vector, nushell, zed, cargo-audit, fnm, zola, garage, lychee, qdrant, uv, pixi, asciinema, parseable, xh...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

Summary: CVE-2026-2663 affects Alixhan xh-admin-backend v1.0–1.7.0 (unknown exact initial versions) due to vulnerable handling in the Database Query Handler for the endpoint /frontend-api/system-service/api/system/role/query, where argument manipulation enables SQL injection. This reportedly allo...