2099335 matches found
RLSA-2026:69461 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the SVG component CVE-2026-92024 firefox: thunderbird: Mitigation bypass in the Remote Settings Client component CVE-2026-92019...
RLSA-2026:69308 Important: yggdrasil security update
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fixes: mime: golang: Golang MIME: Denial of Service via...
RLSA-2026:69099 Important: yggdrasil-worker-package-manager security update
yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that matc...
RLSA-2026:69259 Moderate: tomcat update
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication...
RLSA-2026:69125 Important: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 curl: curl: Information...
RUSTSEC-2026-0299 `owned-alloc` is unmaintained
The owned-alloc crate has had no release since 2018, and the maintainer has not responded to the upstream issue or to direct contact...
ROOT-APP-NUGET-CVE-2026-47304 CVE-2026-47304 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-47304 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2026-47302 CVE-2026-47302 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-47302 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2026-26171 CVE-2026-26171 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-26171 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2026-50525 CVE-2026-50525 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-50525 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2026-50527 CVE-2026-50527 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-50527 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2026-50648 CVE-2026-50648 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-50648 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2026-33116 CVE-2026-33116 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-33116 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2026-32203 CVE-2026-32203 in System.Security.Cryptography.Xml - Patched by Root
Root has patched CVE-2026-32203 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-22740 CVE-2026-22740 in org.springframework:spring-webflux - Patched by Root
Root has patched CVE-2026-22740 in the org.springframework:spring-webflux package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-22745 CVE-2026-22745 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2026-22745 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-22735 CVE-2026-22735 in org.springframework:spring-webflux - Patched by Root
Root has patched CVE-2026-22735 in the org.springframework:spring-webflux package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41850 CVE-2026-41850 in org.springframework:spring-expression - Patched by Root
Root has patched CVE-2026-41850 in the org.springframework:spring-expression package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-22741 CVE-2026-22741 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2026-22741 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41855 CVE-2026-41855 in org.springframework:spring-jms - Patched by Root
Root has patched CVE-2026-41855 in the org.springframework:spring-jms package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64645 CVE-2026-64645 in next - Patched by Root
Root has patched CVE-2026-64645 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-75604 CVE-2026-75604 in next - Patched by Root
Root has patched CVE-2026-75604 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-5J59-XGG2-R9C4 GHSA-5j59-xgg2-r9c4 in next - Patched by Root
Root has patched GHSA-5j59-xgg2-r9c4 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10762 AIKIDO-2026-10762 in next - Patched by Root
Root has patched AIKIDO-2026-10762 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64647 CVE-2026-64647 in next - Patched by Root
Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44580 CVE-2026-44580 in next - Patched by Root
Root has patched CVE-2026-44580 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-H25M-26QC-WCJF GHSA-h25m-26qc-wcjf in next - Patched by Root
Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10757 AIKIDO-2026-10757 in next - Patched by Root
Root has patched AIKIDO-2026-10757 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-51479 CVE-2024-51479 in next - Patched by Root
Root has patched CVE-2024-51479 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10758 AIKIDO-2026-10758 in next - Patched by Root
Root has patched AIKIDO-2026-10758 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2024-10173 AIKIDO-2024-10173 in next - Patched by Root
Root has patched AIKIDO-2024-10173 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-553733 AIKIDO-2026-553733 in next - Patched by Root
Root has patched AIKIDO-2026-553733 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10754 AIKIDO-2026-10754 in next - Patched by Root
Root has patched AIKIDO-2026-10754 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44578 CVE-2026-44578 in next - Patched by Root
Root has patched CVE-2026-44578 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-MWV6-3258-Q52C GHSA-mwv6-3258-q52c in next - Patched by Root
Root has patched GHSA-mwv6-3258-q52c in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-59471 CVE-2025-59471 in next - Patched by Root
Root has patched CVE-2025-59471 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10756 AIKIDO-2026-10756 in next - Patched by Root
Root has patched AIKIDO-2026-10756 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10095 AIKIDO-2026-10095 in next - Patched by Root
Root has patched AIKIDO-2026-10095 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-8H8Q-6873-Q5FJ GHSA-8h8q-6873-q5fj in next - Patched by Root
Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-57822 CVE-2025-57822 in next - Patched by Root
Root has patched CVE-2025-57822 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-34351 CVE-2024-34351 in next - Patched by Root
Root has patched CVE-2024-34351 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40984 CVE-2026-40984 in io.micrometer:micrometer-core - Patched by Root
Root has patched CVE-2026-40984 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40983 CVE-2026-40983 in io.micrometer:micrometer-core - Patched by Root
Root has patched CVE-2026-40983 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available...
EEF-CVE-2026-89420 Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Actions.acceptvoucher/3 in lib/mpp/session/actions.ex treats a voucher whose cumulativeAmount equals the channel's...
BIT-PYTHON-2024-6232 Regular-expression DoS when parsing TarFile headers
There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...
ROOT-APP-PYPI-AIKIDO-2026-499214 AIKIDO-2026-499214 in urllib3 - Patched by Root
Root has patched AIKIDO-2026-499214 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-21441 CVE-2026-21441 in urllib3 - Patched by Root
Root has patched CVE-2026-21441 in the urllib3 package for Root:PyPI. Multiple fixed versions available...