GHSA-2MJX-QC3C-RQVC vulnerabilities

Vulnerabilities for packages: ntpd-rs, pnpm, xh, lychee, deno, vector, pixi, zellij, qdrant, zola, sdp-k8s-injector, cargo-audit, tealdeer, linkerd2-proxy, linkerd-network-validator, sccache...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: fixed the issue with preserving cleanup for reflinks. The commit c06c303832ec “ocfs2: fixed the error where xattr array entries were not properly handled” does not handle all cases, and the cleanup of preserved xattr...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: zed, deno, sdp-k8s-injector, cargo-audit, zizmor, nushell, sccache, atuin, xh, wasmcloud, pixi, linkerd-extension-init, qdrant, wasm-pack, linkerd2-proxy, ntpd-rs, rustls-ffi, kdash, wadm, rustup, wash, buck2, uv, oranda, sqlx, wasmtime, lychee, parseable, samply,...

GHSA-4W2J-M93H-CJ5J vulnerabilities

Vulnerabilities for packages: deno, sccache, komodo, pixi, cargo-audit, pnpm, garage, zola, xh, asciinema, berg...

GHSA-4W2J-M93H-CJ5J vulnerabilities

Vulnerabilities for packages: pnpm, xh, berg, deno, pixi, cargo-audit, zola, sccache...

CVE-2026-43168 ocfs2: fix reflink preserve cleanup issue

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec "ocfs2: fix xattr array entry countedby error" doesn't handle all cases and the cleanup job for preserved xattr entries still has bug: - the 'last' pointer should be...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: berg, py3-xet-core, deno, linkerd2, sdp-k8s-injector, cargo-audit, zizmor, sccache, atuin, xh, wasmcloud, pixi, linkerd-extension-init, qdrant, wasm-pack, linkerd2-proxy, linkerd-network-validator, ntpd-rs, kdash, rustup, zellij, buck2, uv, sqlx, wasmtime, lychee,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: berg, py3-xet-core, deno, linkerd2, sdp-k8s-injector, cargo-audit, zizmor, sccache, atuin, xh, wasmcloud, pixi, linkerd-extension-init, qdrant, wasm-pack, linkerd2-proxy, linkerd-network-validator, ntpd-rs, kdash, rustup, zellij, buck2, uv, sqlx, wasmtime, lychee,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: deno, wasmcloud, sccache, ntpd-rs, fnm, mise, shadowsocks-rust, tealdeer, buck2, ztunnel-fips, xh, linkerd2-cni-plugin, asciinema, atuin, py3-xet-core, linkerd-network-validator, zizmor, komodo, cargo-audit, kdash, sentry-cli, rye, ztunnel, berg, wasm-pack, uv,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: deno, wasmcloud, sccache, ntpd-rs, fnm, mise, shadowsocks-rust, tealdeer, buck2, ztunnel-fips, xh, linkerd2-cni-plugin, asciinema, atuin, py3-xet-core, linkerd-network-validator, zizmor, komodo, cargo-audit, kdash, sentry-cli, rye, ztunnel, berg, wasm-pack, uv,...

MINI-8X86-32FX-24XH

Bulletin has no description...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: zed, berg, py3-xet-core, deno, linkerd2, sdp-k8s-injector, cargo-audit, zizmor, nushell, sccache, atuin, xh, wasmcloud, pixi, linkerd-extension-init, qdrant, wasm-pack, linkerd2-proxy, linkerd-network-validator, ntpd-rs, rustls-ffi, kdash, rustup, zellij, buck2, uv,...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: deno, wasmcloud, sccache, ntpd-rs, fnm, mise, shadowsocks-rust, tealdeer, buck2, ztunnel-fips, xh, pgcat, linkerd2-cni-plugin, asciinema, atuin, py3-xet-core, linkerd-network-validator, zizmor, komodo, cargo-audit, kdash, sentry-cli, rye, nushell, ztunnel, berg,...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: zed, berg, py3-xet-core, cargo-audit, zizmor, nushell, sccache, xh, wasmcloud, pixi, qdrant, wadm, vector, wash, uv, lychee, parseable, samply, zola...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: zed, berg, py3-xet-core, cargo-audit, zizmor, nushell, sccache, xh, wasmcloud, pixi, qdrant, wadm, vector, wash, uv, lychee, parseable, samply, zola...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: wash, wasmcloud, sccache, fnm, vector, xh, asciinema, wadm, apollo-router, py3-xet-core, zizmor, komodo, cargo-audit, nushell, berg, uv, garage, zola, qdrant, lychee, parseable, zed, pixi, samply...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: wash, wasmcloud, sccache, fnm, vector, xh, asciinema, wadm, apollo-router, py3-xet-core, zizmor, komodo, cargo-audit, nushell, berg, uv, garage, zola, qdrant, lychee, parseable, zed, pixi, samply...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...