CVE-2026-43168 ocfs2: fix reflink preserve cleanup issue

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec "ocfs2: fix xattr array entry countedby error" doesn't handle all cases and the cleanup job for preserved xattr entries still has bug: - the 'last' pointer should be...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: xh, shadowsocks-rust, berg, sqlx, samply, zellij, zola, kdash, wasm-pack, ntpd-rs, buck2, pixi, cargo-audit, linkerd2-proxy, linkerd-extension-init, zizmor, sccache, parseable, linkerd2, rustup, rye, tealdeer, py3-xet-core, linkerd-network-validator, wasmtime,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: xh, shadowsocks-rust, berg, sqlx, samply, zellij, zola, kdash, wasm-pack, ntpd-rs, buck2, pixi, cargo-audit, linkerd2-proxy, linkerd-extension-init, zizmor, sccache, parseable, linkerd2, rustup, rye, tealdeer, py3-xet-core, linkerd-network-validator, wasmtime,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: rye, lakekeeper, linkerd2-proxy, sqlx, parseable, zellij, shadowsocks-rust, ztunnel-fips, pixi, berg, rustup, linkerd2, komodo, samply, ntpd-rs, kdash, mise, garage, xh, zizmor, linkerd2-cni-plugin, linkerd-network-validator, buck2, lychee, qdrant, atuin, tealdeer,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: rye, lakekeeper, linkerd2-proxy, sqlx, parseable, zellij, shadowsocks-rust, ztunnel-fips, pixi, berg, rustup, linkerd2, komodo, samply, ntpd-rs, kdash, mise, garage, xh, zizmor, linkerd2-cni-plugin, linkerd-network-validator, buck2, lychee, qdrant, atuin, tealdeer,...

MINI-8X86-32FX-24XH

Bulletin has no description...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: xh, shadowsocks-rust, nushell, berg, sqlx, samply, zellij, zola, kdash, wasm-pack, ntpd-rs, buck2, pixi, cargo-audit, linkerd2-proxy, linkerd-extension-init, rustls-ffi, zizmor, sccache, pgcat, parseable, linkerd2, rustup, rye, tealdeer, py3-xet-core,...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: rye, sdp-k8s-injector, linkerd2-proxy, sqlx, parseable, rustls-ffi, zellij, shadowsocks-rust, ztunnel-fips, pixi, berg, rustup, linkerd2, komodo, samply, ntpd-rs, nushell, kdash, mise, garage, xh, zizmor, linkerd2-cni-plugin, linkerd-network-validator, buck2, lychee,...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: xh, nushell, berg, samply, zola, pixi, cargo-audit, zizmor, sccache, parseable, wadm, py3-xet-core, vector, wash, zed, wasmcloud, qdrant, lychee, uv...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: xh, nushell, berg, samply, zola, pixi, cargo-audit, zizmor, sccache, parseable, wadm, py3-xet-core, vector, wash, zed, wasmcloud, qdrant, lychee, uv...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: parseable, pixi, berg, komodo, samply, nushell, wadm, garage, xh, zizmor, lychee, qdrant, wasmcloud, fnm, py3-xet-core, wash, zola, zed, vector, uv, asciinema, sccache, cargo-audit...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: parseable, pixi, berg, komodo, samply, nushell, wadm, garage, xh, zizmor, lychee, qdrant, wasmcloud, fnm, py3-xet-core, wash, zola, zed, vector, uv, asciinema, sccache, cargo-audit...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663

Summary: CVE-2026-2663 affects Alixhan xh-admin-backend v1.0–1.7.0 (unknown exact initial versions) due to vulnerable handling in the Database Query Handler for the endpoint /frontend-api/system-service/api/system/role/query, where argument manipulation enables SQL injection. This reportedly allo...

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-2663 Alixhan xh-admin-backend Database Query query sql injection

A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown processing of the file /frontend-api/system-service/api/system/role/query of the component Database Query Handler. Such manipulation of the argument prop leads to sql injection. It ...

CVE-2026-25727 vulnerabilities

Vulnerabilities for packages: xh, rust-analyzer, shadowsocks-rust, nushell, geckodriver, mountpoint-s3, berg, sqlx, samply, zellij, zola, cedar, kdash, starship, wasm-pack, buck2, yazi, pixi, cargo-audit, linkerd2-proxy, yara-x, zizmor, sccache, topgrade, parseable, rye, uutils, wadm, py3-xet-cor...

GHSA-R6V5-FH4H-64XC vulnerabilities

Vulnerabilities for packages: xh, rust-analyzer, shadowsocks-rust, nushell, geckodriver, mountpoint-s3, berg, sqlx, samply, zellij, zola, cedar, kdash, starship, wasm-pack, buck2, yazi, pixi, cargo-audit, linkerd2-proxy, yara-x, zizmor, sccache, topgrade, parseable, rye, uutils, wadm, py3-xet-cor...

CVE-2026-25727 vulnerabilities

Vulnerabilities for packages: watchexec, rust-analyzer, linkerd2-proxy, sqlx, parseable, zellij, shadowsocks-rust, ztunnel-fips, pixi, berg, komodo, samply, virtiofsd, nushell, kdash, wadm, yazi, xh, zizmor, cedar, uutils, deno, starship, eza, guestproxyagent, buck2, lychee, mountpoint-s3, atuin,...