MAL-2026-16928 Malicious code in bundldf (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16927 Malicious code in bundlar (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16926 Malicious code in bundlaf (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16925 Malicious code in bundlaer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16923 Malicious code in bundker (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16924 Malicious code in bundlaef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16922 Malicious code in bundkef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16921 Malicious code in bundiler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16919 Malicious code in bundier (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16920 Malicious code in bundilef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16917 Malicious code in bunder (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16918 Malicious code in bundief (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16916 Malicious code in bundelr (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16915 Malicious code in bundelf (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16914 Malicious code in bundeler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16913 Malicious code in bundelef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16912 Malicious code in bundef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16911 Malicious code in bundeer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16910 Malicious code in bundeef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16909 Malicious code in bunddler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

DEBIAN-CVE-2026-94640

A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists, leading to...

MAL-2026-16908 Malicious code in bunddlef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16907 Malicious code in bundaler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16906 Malicious code in bundalef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16904 Malicious code in bundaef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16905 Malicious code in bundaer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-85734 LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightragserver.py does not impose a rate limit, account lockout, delay, or counter for failed authentication attempts. A network attacker can submit password guesses at full...

MAL-2026-16903 Malicious code in buncler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16902 Malicious code in bunclef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16900 Malicious code in bunalef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16901 Malicious code in bunaler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16899 Malicious code in bunalder (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16898 Malicious code in bunadler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16897 Malicious code in bunadlef (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

DEBIAN-CVE-2026-90462

A flaw was found in SSSD. When configured with the LDAP access provider and ldapaccessorder including ppolicy or lockout, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision,...

MAL-2026-16896 Malicious code in bunader (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

DEBIAN-CVE-2026-86805

A time-of-check to time-of-use TOCTOU race condition in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DTRPATH for setuid/setgid ATSECURE programs, glibc validates the lexically normalized...

MAL-2026-16895 Malicious code in bumxler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

AZL-103413 CVE-2026-86805 affecting package glibc 2.38-21

A time-of-check to time-of-use TOCTOU race condition in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DTRPATH for setuid/setgid ATSECURE programs, glibc validates the lexically normalized...

MAL-2026-16894 Malicious code in bumuler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16893 Malicious code in bumsler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16892 Malicious code in bumsdler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16891 Malicious code in bumrler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16890 Malicious code in bumrdler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16888 Malicious code in bumodler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16889 Malicious code in bumoler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

UBUNTU-CVE-2026-81878

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

UBUNTU-CVE-2026-90462

A flaw was found in SSSD. When configured with the LDAP access provider and ldapaccessorder including ppolicy or lockout, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision,...

UBUNTU-CVE-2026-86805

A time-of-check to time-of-use TOCTOU race condition in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DTRPATH for setuid/setgid ATSECURE programs, glibc validates the lexically normalized...

UBUNTU-CVE-2026-81886

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loo...