424073 matches found
PT-2026-130989
TuxCare rebuilt @angular/platform-browser to address 14 CVEs. Fixed in 14.3.0-tuxcare.9...
PT-2026-130911
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 8.2.14-tuxcare.5...
PT-2026-117331
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description A path traversal issue exists in the Apache Camel FTP component affecting ftp, ftps, and sftp schemes. The remote-file consumers build absolute...
PT-2026-131850
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 18.2.13-tuxcare.4...
PT-2026-131851
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 19.2.18-tuxcare.3...
PT-2026-131227
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 9.1.13-tuxcare.16...
PT-2026-131234
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 11.2.14-tuxcare.12...
PT-2026-131224
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 19.2.21-tuxcare.9...
PT-2026-131232
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 10.1.0-tuxcare.8...
PT-2026-131231
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 10.2.5-tuxcare.13...
PT-2026-130894
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 15.2.1-tuxcare.6...
PT-2026-122238
Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 36.0.19 Wasmtime versions prior to 48.0.7 Wasmtime versions prior to 49.0.4 Description The Cranelift compiler backend on aarch64 can incorrectly compile a Wasm br table instruction when it contains more than...
PT-2026-117407
Television tv 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in format command. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the...
PT-2026-117241
Name of the Vulnerable Software and Affected Versions BDM Digital Payment Gateway WordPress plugin versions prior to 1.3.13 Description The plugin fails to verify credentials on its public payment-status update route and treats unset credentials as valid. This allows unauthenticated attackers to...
PT-2026-131973
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 5.1.0-tuxcare.1...
PT-2026-131972
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 11.2.11-tuxcare.1...
PT-2026-132507
debian/rules: disable the build-time test suite on armel, which is built under emulation and too slow to run it...
PT-2026-117648
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The P;2L and P;4L raw decoders in the Pillow Python imaging library contain a flaw where they can read past the end of an input buffer. This occurs because ImagingRawDecode calculates a packed-pixel...
PT-2026-117670
Name of the Vulnerable Software and Affected Versions Pillow versions 8.1.0 through 12.x Description Pillow contains an out-of-bounds read issue when decoding certain malformed compressed TIFF files. The problem occurs in the decodeTile and decodeAsRGBA functions within src/libImaging/TiffDecode....
PT-2026-117671
Name of the Vulnerable Software and Affected Versions Pillow versions 12.0.0 through 12.x Description The Image.merge function can dereference a null image8 plane because validation skips the first input band. This allows a 32-bit integer or floating-point image backed by image32 storage to be...
PT-2026-117672
Name of the Vulnerable Software and Affected Versions Pillow versions 5.1.0 through 12.1.0 Description A flaw exists where the library can enter an infinite loop during the rewriting of PDF pages. This occurs because the PdfParser.rewrite pages function follows parent relationships without...
PT-2026-117645
Name of the Vulnerable Software and Affected Versions Pillow versions 7.2.0 through 12.11.0 Description A flaw exists when processing MIC images, where the library can enter an infinite loop while determining the frame count. This occurs because MicImageFile inherits TIFF frame traversal, but...
PT-2026-117656
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The FlashPix JPEG-tile decoder in the Pillow imaging library contains a flaw where decoded scanlines can be written beyond the allocated tile buffer. This occurs because FlashPix FPX JPEG decoding...
PT-2026-120333
These are all security issues fixed in the chromedriver-155.0.8059.84-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-117587
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A severe issue has been disclosed affecting Microsoft Edge, with reports of elevated activities targeting this flaw. Recommendations At the moment, there is no information about a newe...
PT-2026-117624
Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox by passing uncleansed criteria to getNext, getPrev, or getOwners. Attackers can inject Yii "as" or "on" config keys to attach malicious event...
PT-2026-131673
TuxCare rebuilt @angular/platform-browser-dynamic to address 15 CVEs. Fixed in 4.4.7-tuxcare.8...
PT-2026-131678
TuxCare rebuilt @angular/platform-browser-dynamic to address 14 CVEs. Fixed in 13.3.12-tuxcare.2...
PT-2026-131677
TuxCare rebuilt @angular/platform-browser-dynamic to address 16 CVEs. Fixed in 16.2.7-tuxcare.2...
PT-2026-131675
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 5.2.11-tuxcare.9...
PT-2026-131670
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 11.2.0-tuxcare.2...
PT-2026-131671
TuxCare rebuilt @angular/platform-browser-dynamic to address 5 CVEs. Fixed in 18.2.14-tuxcare.12...
PT-2026-131676
TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 6.0.1-tuxcare.5...
PT-2026-131672
TuxCare rebuilt @angular/platform-browser-dynamic to address 14 CVEs. Fixed in 16.2.12-tuxcare.11...
PT-2026-132000
TuxCare rebuilt @angular/service-worker to address 10 CVEs. Fixed in 10.2.5-tuxcare.8...
PT-2026-131674
TuxCare rebuilt @angular/platform-browser-dynamic to address 17 CVEs. Fixed in 18.2.12-tuxcare.2...
PT-2026-118049
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite in github.com/0xJacky/Nginx-UI...
PT-2026-117337
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, exists in the Apache Camel Azure Files component. The...
PT-2026-118247
Name of the Vulnerable Software and Affected Versions Go versions prior to 1.26.10 Go versions prior to 1.27.3 webpki-roots versions prior to 1.0.10 Description Eight intermediate CA certificates from eMudhra were compromised due to a flawed key-generation ceremony using a FIPS 140-2 Level 3 HSM....
PT-2026-117497
Name of the Vulnerable Software and Affected Versions russh versions prior to 0.64.1 Description The agent server in the library contains a flaw where it spawns a separate long-lived task for every SSH AGENT CONSTRAIN LIFETIME record received in a constrained add-key request. The add key function...
PT-2026-117472
Name of the Vulnerable Software and Affected Versions Picomatch versions prior to 4.0.8 Description A regular expression denial of service ReDoS occurs when parsing single-branch repeated extglob patterns, such as + or +a. The analyzeRepeatedExtglob function in lib/parse.js fails to handle these...
PT-2026-132553
TuxCare rebuilt @react-router/cloudflare to address 1 CVE. Fixed in 7.5.1-tuxcare.7...
PT-2026-132550
TuxCare rebuilt @react-router/cloudflare to address 3 CVEs. Fixed in 7.5.1-tuxcare.5...
PT-2026-132535
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-132549
TuxCare rebuilt @react-router/cloudflare to address 2 CVEs. Fixed in 7.5.1-tuxcare.1...
PT-2026-132551
TuxCare rebuilt @react-router/cloudflare to address 1 CVE. Fixed in 7.5.1-tuxcare.6...
PT-2026-131957
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 10.2.5-tuxcare.7...
PT-2026-131943
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 18.2.14-tuxcare.5...