Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: fixed the issue with preserving cleanup for reflinks. The commit c06c303832ec “ocfs2: fixed the error where xattr array entries were not properly handled” does not handle all cases, and the cleanup of preserved xattr...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: zed, xh, oranda, deno, rustup, zola, cargo-audit, wasm-pack, rustls-ffi, samply, kdash, rye, wasmcloud, nushell, linkerd2-proxy, ntpd-rs, wadm, parseable, atuin, qdrant, pixi, zizmor, sccache, wasmtime, buck2, uv, lychee, sqlx, wash, sdp-k8s-injector, tealdeer,...

GHSA-4W2J-M93H-CJ5J vulnerabilities

Vulnerabilities for packages: zola, garage, berg, deno, cargo-audit, asciinema, pixi, sccache, xh, komodo...

GHSA-4W2J-M93H-CJ5J vulnerabilities

Vulnerabilities for packages: deno, sccache, zola, cargo-audit, xh, berg, pixi...

CVE-2026-43168 ocfs2: fix reflink preserve cleanup issue

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec "ocfs2: fix xattr array entry countedby error" doesn't handle all cases and the cleanup job for preserved xattr entries still has bug: - the 'last' pointer should be...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, linkerd2, xh, zellij, deno, rustup, zola, cargo-audit, wasm-pack, samply, kdash, py3-xet-core, rye, wasmcloud, ztunnel, linkerd2-proxy, ntpd-rs, parseable, atuin, qdrant, pixi, zizmor, sccache, wasmtime, buck2, uv, lychee, sqlx, berg,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, linkerd2, xh, zellij, deno, rustup, zola, cargo-audit, wasm-pack, samply, kdash, py3-xet-core, rye, wasmcloud, ztunnel, linkerd2-proxy, ntpd-rs, parseable, atuin, qdrant, pixi, zizmor, sccache, wasmtime, buck2, uv, lychee, sqlx, berg,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: zola, kdash, atuin, linkerd2-cni-plugin, garage, berg, cargo-audit, ntpd-rs, parseable, asciinema, sqlx, lychee, tealdeer, linkerd-network-validator, komodo, buck2, fnm, lakekeeper, rustup, ztunnel, deno, zellij, shadowsocks-rust, xh, wasm-pack, rye, zizmor,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: zola, kdash, atuin, linkerd2-cni-plugin, garage, berg, cargo-audit, ntpd-rs, parseable, asciinema, sqlx, lychee, tealdeer, linkerd-network-validator, komodo, buck2, fnm, lakekeeper, rustup, ztunnel, deno, zellij, shadowsocks-rust, xh, wasm-pack, rye, zizmor,...

MINI-8X86-32FX-24XH

Bulletin has no description...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, linkerd2, pgcat, zed, xh, oranda, zellij, deno, rustup, zola, cargo-audit, wasm-pack, rustls-ffi, kdash, samply, py3-xet-core, rye, wasmcloud, ztunnel, nushell, linkerd2-proxy, ntpd-rs, parseable, atuin, qdrant, pixi, zizmor, sccache,...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: zola, kdash, atuin, linkerd2-cni-plugin, oranda, garage, berg, cargo-audit, ntpd-rs, parseable, asciinema, sqlx, lychee, tealdeer, linkerd-network-validator, komodo, buck2, fnm, pgcat, rustup, ztunnel, deno, rustls-ffi, zellij, shadowsocks-rust, xh, nushell, wasm-pac...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: zed, xh, zola, cargo-audit, samply, py3-xet-core, wasmcloud, nushell, wadm, zizmor, parseable, qdrant, pixi, sccache, vector, lychee, berg, wash, uv...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: zed, xh, zola, cargo-audit, samply, py3-xet-core, wasmcloud, nushell, wadm, zizmor, parseable, qdrant, pixi, sccache, vector, lychee, berg, wash, uv...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: zola, garage, berg, cargo-audit, parseable, asciinema, lychee, komodo, fnm, xh, nushell, zizmor, wash, vector, wadm, sccache, zed, wasmcloud, qdrant, samply, py3-xet-core, apollo-router, pixi, uv...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: zola, garage, berg, cargo-audit, parseable, asciinema, lychee, komodo, fnm, xh, nushell, zizmor, wash, vector, wadm, sccache, zed, wasmcloud, qdrant, samply, py3-xet-core, apollo-router, pixi, uv...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

Summary: CVE-2026-2663 affects Alixhan xh-admin-backend v1.0–1.7.0 (unknown exact initial versions) due to vulnerable handling in the Database Query Handler for the endpoint /frontend-api/system-service/api/system/role/query, where argument manipulation enables SQL injection. This reportedly allo...