ROOT-APP-MAVEN-CVE-2026-41732 CVE-2026-41732 in org.springframework.pulsar:spring-pulsar - Patched by Root

Root has patched CVE-2026-41732 in the org.springframework.pulsar:spring-pulsar package for Root:Maven. Multiple fixed versions available...

CVE-2026-96455 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

CLSA-2026-1790157664 TuxCare security update for org.springframework (29 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 29 CVEs. Fixed in 5.2.10.RELEASE-tuxcare.1...

CVE-2026-96454 Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/default.json, which grants IPC access with...

CLSA-2026-1790156895 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post16+tuxcare...

DEBIAN-CVE-2026-95516

Bulletin has no description...

DEBIAN-CVE-2026-95507

Bulletin has no description...

CLSA-2026-1790156287 TuxCare security update for pillow (1 CVE)

TuxCare rebuilt pillow to address 1 CVE. Fixed in 8.4.0.post6+tuxcare...

CGA-MW56-MWR8-GJPP

Bulletin has no description...

UBUNTU-CVE-2026-95625

The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...

OPENSUSE-SU-2026:21933-1 Security update for sdbootutil

This update for sdbootutil fixes the following issues: Security issues fixed: - CVE-2026-41676: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270192. - CVE-2026-41677: out-of-bounds read in PEM password callback when returning an oversized length in...

CLSA-2026-1790154692 TuxCare security update for pillow (1 CVE)

TuxCare rebuilt pillow to address 1 CVE. Fixed in 11.2.1.post7+tuxcare...

MAL-2026-16473 Malicious code in sea-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aaf4b5ddb859270a86aa6d21df680ed66fb0622434317747a6f7275ad9a3d60 sea-baileys is a fork of the Baileys WhatsApp Web library. Its package.json remaps the libsignal import specifier to...

MAL-2026-16474 Malicious code in vite-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac504b2228b7e2d5aab05aac8cb13072d87bc4f047f390d207c7712c7cdd123 The package presents as a Vite dev-server wrapper but its declared postinstall node./postinstall-run.cjs chains through...

ROOT-APP-MAVEN-CVE-2023-6378 CVE-2023-6378 in ch.qos.logback:logback-core - Patched by Root

Root has patched CVE-2023-6378 in the ch.qos.logback:logback-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-1225 CVE-2026-1225 in ch.qos.logback:logback-core - Patched by Root

Root has patched CVE-2026-1225 in the ch.qos.logback:logback-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2021-42550 CVE-2021-42550 in ch.qos.logback:logback-core - Patched by Root

Root has patched CVE-2021-42550 in the ch.qos.logback:logback-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77408 CVE-2026-77408 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77408 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77411 CVE-2026-77411 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77411 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77410 CVE-2026-77410 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77410 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77406 CVE-2026-77406 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77406 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-79921 CVE-2026-79921 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-79921 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77407 CVE-2026-77407 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77407 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77404 CVE-2026-77404 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77404 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77405 CVE-2026-77405 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77405 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77412 CVE-2026-77412 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77412 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-77403 CVE-2026-77403 in github.com/rabbitmq/amqp091-go - Patched by Root

Root has patched CVE-2026-77403 in the github.com/rabbitmq/amqp091-go package for Root:Go. Multiple fixed versions available...

CVE-2026-95625 Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...

CGA-73R2-942J-J593

Bulletin has no description...

ROOT-OS-DEBIAN-13-CVE-2026-50045 CVE-2026-50045 in unbound - Patched by Root

Root has patched CVE-2026-50045 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-44690 CVE-2026-44690 in unbound - Patched by Root

Root has patched CVE-2026-44690 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-82717 CVE-2026-82717 in unbound - Patched by Root

Root has patched CVE-2026-82717 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root

Root has patched CVE-2026-55973 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-81634 CVE-2026-81634 in unbound - Patched by Root

Root has patched CVE-2026-81634 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-44621 CVE-2026-44621 in unbound - Patched by Root

Root has patched CVE-2026-44621 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-81642 CVE-2026-81642 in unbound - Patched by Root

Root has patched CVE-2026-81642 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-55991 CVE-2026-55991 in unbound - Patched by Root

Root has patched CVE-2026-55991 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-55990 CVE-2026-55990 in unbound - Patched by Root

Root has patched CVE-2026-55990 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32665 CVE-2026-32665 in unbound - Patched by Root

Root has patched CVE-2026-32665 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-40691 CVE-2026-40691 in unbound - Patched by Root

Root has patched CVE-2026-40691 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50046 CVE-2026-50046 in unbound - Patched by Root

Root has patched CVE-2026-50046 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50251 CVE-2026-50251 in unbound - Patched by Root

Root has patched CVE-2026-50251 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56416 CVE-2026-56416 in unbound - Patched by Root

Root has patched CVE-2026-56416 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50252 CVE-2026-50252 in unbound - Patched by Root

Root has patched CVE-2026-50252 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50248 CVE-2026-50248 in unbound - Patched by Root

Root has patched CVE-2026-50248 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-50782 CVE-2023-50782 in cryptography - Patched by Root

Root has patched CVE-2023-50782 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-26130 CVE-2024-26130 in cryptography - Patched by Root

Root has patched CVE-2024-26130 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root

Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in cryptography - Patched by Root

Root has patched GHSA-537c-gmf6-5ccf in the cryptography package for Root:PyPI. Multiple fixed versions available...

SUSE-SU-2026:4296-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. - CVE-2026-53613: Local Privilege Escalation via TOCTOU in mount8 —...