MINI-XM8R-XC2X-F28X

Bulletin has no description...

MINI-6HXC-3Q2J-JPPP

Bulletin has no description...

MINI-C67V-4CMC-X4FX

Bulletin has no description...

MINI-Q48M-W4P5-HR4V

Bulletin has no description...

MINI-545C-XRVQ-3GCR

Bulletin has no description...

DEBIAN-CVE-2026-88753

A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...

CLSA-2026-1792080922 TuxCare security update for io.projectreactor (2 CVEs)

TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.7.19-tuxcare.1...

MINI-P7QQ-6M43-QWV4

Bulletin has no description...

MINI-XVVX-X469-Q7FP

Bulletin has no description...

MINI-PXW8-WG39-RM66

Bulletin has no description...

MINI-R4JR-X2HH-M6J6

Bulletin has no description...

MINI-V8XH-RV52-CX96

Bulletin has no description...

MINI-G8P5-664V-W8G5

Bulletin has no description...

CVE-2026-100353 kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter

kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths that were missed by the fix for GHSA-p6wj-qrr4-pgh5 lack a nil-items guard for legal OpenAPI 3.1 array schemas. An unauthenticated remote client can trigger a deterministic...

MINI-QPQ8-CM9C-32QM

Bulletin has no description...

MINI-JQ46-72C6-QJRQ

Bulletin has no description...

MINI-PWWF-VWQQ-G47F

Bulletin has no description...

MINI-7V77-W3M6-6FQW

Bulletin has no description...

MINI-72JG-RQRW-GHW7

Bulletin has no description...

MINI-9MGW-G958-MWP5

Bulletin has no description...

MINI-85WQ-F3RQ-CFP5

Bulletin has no description...

MINI-9HQH-QGJG-GVGH

Bulletin has no description...

MINI-G8XX-MPCF-M9GM

Bulletin has no description...

MINI-7W67-JVPJ-C3HM

Bulletin has no description...

MINI-5PRG-Q6X8-H2WW

Bulletin has no description...

MINI-VJF2-4W4C-4C7M

Bulletin has no description...

CVE-2026-100354 kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an allOf, anyOf, or oneOf chain refers back to an ancestor schema, even though loading and document validation accept the circular reference...

MINI-W473-XP37-CCQ2

Bulletin has no description...

MINI-3WR9-7Q3J-7FQR

Bulletin has no description...

CLSA-2026-1792080021 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 21 org.springframework.security packages to address 2 CVEs. Fixed in 5.8.14-tuxcare.3...

MINI-65VC-9WMG-P6JR

Bulletin has no description...

MINI-3C4H-2283-R6MX

Bulletin has no description...

MINI-6236-WXJH-FXJ7

Bulletin has no description...

CLSA-2026-1792079757 TuxCare security update for org.springframework.security (6 CVEs)

TuxCare rebuilt 19 org.springframework.security packages to address 6 CVEs. Fixed in 6.1.6-tuxcare.8...

CVE-2026-100352 kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and infinity numeric values to santhosh-tekuri/jsonschema v6.0.2 without applying kin-openapi's existing finite-number guards. A remote unauthenticated client can send an...

MINI-GM65-MXJV-C58X

Bulletin has no description...

MINI-PXP6-XWR6-JV43

Bulletin has no description...

MINI-MFGC-FH74-478M

Bulletin has no description...

MINI-J2CR-MP8V-76GJ

Bulletin has no description...

MINI-8VJJ-HJ72-CVPC

Bulletin has no description...

MINI-35X4-F52F-3J6Q

Bulletin has no description...

CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from...

MINI-872X-8644-MXQR

Bulletin has no description...

MINI-65WW-H6GP-89R8

Bulletin has no description...

MINI-V936-3RCF-FCRR

Bulletin has no description...

MINI-H429-Q4X2-67W9

Bulletin has no description...

MINI-J6GV-QWQ8-6W2R

Bulletin has no description...

MINI-G7VJ-MW55-5QF3

Bulletin has no description...

CLSA-2026-1792079446 TuxCare security update for org.springframework.security (15 CVEs)

TuxCare rebuilt 18 org.springframework.security packages to address 15 CVEs. Fixed in 6.0.7-tuxcare.1...

CVE-2026-100349 kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.ValidateResponse passes a nil response header schema to decodeValue when an OpenAPI document declares the header with content instead of schema. The document passes validation, but every response validation f...