PT-2026-100888

ghsa-2wpx-qpw2-g5h5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101185

Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100130

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100276

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100595

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101940

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102080

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101772

Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101631

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102040

Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101092

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100371

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100584

ghsa-h6fc-48rj-7qqh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95469

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This is possible due to a stack buffer overflow, which occurs when the system processes XA...

PT-2026-95362

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the HTTP/2 HpackEncoder. A remote attacker can trigger a Denial of Service DoS by sending HTTP/2 SETTINGS frames containing an excessively large MAX HEADER TABLE SIZE. This...

PT-2026-95359

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the SpdySessionHandler allows an unlimited number of concurrent remote-initiated streams because the localConcurrentStreams variable defaults to Integer.MAX VALUE and the handler lack...

PT-2026-95421

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists where the HTTP-object conversion path incorrectly processes specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests as regular HTTP/1.1 CONNECT requests. This misinterpretati...

PT-2026-95308

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the netty-handler-ssl-ocsp component. A remote attacker can bypass security controls by providing an Online Certificate Status Protocol OCSP response that omits the optional...

PT-2026-95355

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the SmtpResponseDecoder component. A remote attacker, acting as a malicious or man-in-the-middle MITM SMTP server, can send a specially crafted, unbounded multi-line SMTP...

PT-2026-95302

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the StompSubframeDecoder component allows a remote attacker to cause a permanent memory leak by sending a specially crafted STOMP frame body that lacks its terminating null byte. This...

PT-2026-95424

Name of the Vulnerable Software and Affected Versions netty-codec-smtp versions prior to 4.1.138-1.1 Description Netty netty-codec-smtp fails to properly validate Carriage Return CR and Line Feed LF characters within the SMTP command-name field. If an application passes untrusted input into this...

PT-2026-100816

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100806

Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100436

Security vulnerability affects the libpng package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101160

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102019

Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102180

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100044

Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102140

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-99995

Security vulnerability affects the 7zip package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101269

ghsa-293q-567p-wmwq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101434

ghsa-w35j-pv5h-q9q9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101600

Security vulnerability affects the erlang package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101331

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100733

Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100132

Security vulnerability affects the python3 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100485

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95391

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances...

PT-2026-101403

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100281

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95340

Name of the Vulnerable Software and Affected Versions Popup Maker versions prior to 1.25.0 Description The Popup Maker plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Authenticated attackers with contributor-level...

PT-2026-100042

Security vulnerability affects the kube-vip-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100564

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100347

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100657

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95545

Name of the Vulnerable Software and Affected Versions LMDeploy versions 0.12.1 through 0.12.2 Description Code injection is possible when loading a malicious HuggingFace model. The issue occurs because the quant dtype value from the model's quantization config is passed to the eval function in...

PT-2026-101524

ghsa-pw6j-qg29-8w7f affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101343

ghsa-29wx-vh33-7x7r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95676

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An OS command injection flaw exists in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a...

PT-2026-95647

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The undo partition function reads the time encoder variable from the part config table as unrestricted text and interpolates it into a dynamically executed SELECT statement without identifier...