PT-2026-102076

Security vulnerability affects the kubernetes-dns-node-cache-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95577

Name of the Vulnerable Software and Affected Versions Paymenter versions prior to 1.5.7 Description A race condition exists in the service downgrade implementation within the doUpgrade function of app/Livewire/Services/Upgrade.php. The application uses Service::upgradable to check for pending...

PT-2026-95327

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description An improper certificate validation issue exists...

PT-2026-95332

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-12 Synology DiskStation Manager versions prior to 7.2.2-72806-9 Synology DiskStation Manager versions prior to 7.3.2-86009-4 Synology DiskStation Manager versions prior to 7.4-90075...

PT-2026-101057

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95426

Name of the Vulnerable Software and Affected Versions hickory-resolver versions prior to 0.26.2 Description The software fails to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookup ip APIs, which allows invalid records to be returned as successful results. This...

PT-2026-95603

Name of the Vulnerable Software and Affected Versions OpenStack Blazar versions prior to 17.0.1 Description The V2 lease API fails to enforce object-level authorization during update and delete operations. This occurs because the authorize wrapper searches for the lease using the keyword lease id...

PT-2026-100658

Security vulnerability affects the trino package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101138

Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102265

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95563

Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description Mongoid may omit encryption rules for fields declared on embedded models during the generation of the client-side field-level encryption schema. This allows applications using this feature to...

PT-2026-100759

Security vulnerability affects the nginx package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101938

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100240

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101213

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101350

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101866

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102023

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101868

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102160

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100804

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100851

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101027

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101072

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100783

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95489

Name of the Vulnerable Software and Affected Versions Capsule versions 0.13.0 through 0.13.6 Description A validation error in internal/webhook/tenant/validation/forbidden annotations regex.go allows a malformed ForbiddenAnnotations.Regex value to bypass validation during a Tenant update. This...

PT-2026-102290

Summary In affected versions, the URL of a remote MCP server is attacker-controlled at registration and is fetched server-side with no validation of the destination. There is no guard against loopback, link-local, RFC1918 private ranges, or the cloud metadata endpoint 169.254.169.254, so a use wi...

PT-2026-100017

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101364

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95420

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the HTTP/2 codec when converting HTTP/1 CONNECT requests to HTTP/2. The component incorrectly utilizes the Host header instead of the CONNECT authority-form request-target to...

PT-2026-95462

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description An authenticated attacker can cause a denial of service or potentially escalate privileges. This occurs due to a heap buffer overflow—a condition where data exceeds the allocated memory buffer...

PT-2026-101719

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95587

Name of the Vulnerable Software and Affected Versions Quarkus Qute affected versions not specified Description A flaw in the Quarkus Qute template engine occurs when the eval section helper processes a sub-template and fails to pass the parent template's content type information. This failure...

PT-2026-101581

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95282

Name of the Vulnerable Software and Affected Versions Mapster WP Maps versions prior to 1.23.1 Description The plugin contains an Arbitrary User Meta Write flaw within the my profile update function. The issue occurs because the function fails to perform nonce verification, capability checks, and...

PT-2026-102270

Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102280

TuxCare rebuilt flask to address 1 CVE. Fixed in 2.2.5.post1+tuxcare...

PT-2026-95360

What's new in 7.25beta5 2026-09-16: bridge - fix host-table entry removal on CRS8xx devices introduced in v7.25beta4; bridge - warn about VLAN entries when vlan-filtering is disabled; bth - add default client DNS and allowed IPs settings; certificate - refactor certificate internal processes...

PT-2026-102083

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100294

ghsa-65pc-fj4g-8rjx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101588

Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100061

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95621

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An unauthenticated second-order SQL injection exists in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker can inject malicious SQL that the application lat...

PT-2026-100206

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100685

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101167

Security vulnerability affects the pritunl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100318

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102144

Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101377

ghsa-vxpw-j846-p89q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95650

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description pg partman is a PostgreSQL extension used for managing partitioned tables by time or ID. The functions drop partition id and drop partition time utilize part config.retention schema as the target...