PT-2026-100457

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95401

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description An issue exists where strict validation of the chunk-size line is skipped when the line contains no chunk extension ;. A remote attacker can exploit this by sending a specially crafted HTTP...

PT-2026-95698

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the netty-codec-http component allows a remote attacker to perform HTTP request smuggling. This occurs due to incorrect parsing of the HTTP/1.1 chunk-size token when it contains...

PT-2026-95468

Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This occurs due to a heap buffer underflow—a condition where a program writes dat...

PT-2026-95193

Name of the Vulnerable Software and Affected Versions NASA CryptoLib version 1.5.0 Description An authentication downgrade issue exists in the Telecommand TC receive path. The receiver selects the Security Association SA used for Space Data Link Security SDLS processing based only on the SPI fiel...

PT-2026-100081

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101913

Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100493

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101215

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102100

ghsa-f23m-r3pf-42rh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100447

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101646

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102107

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101918

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101518

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100170

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95366

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 ImageMagick versions prior to 6.9.13-56 Description A policy bypass exists in the PCD, CUBE, and HALD coders. When a specific command line option is used, the decoder fails to verify the configured resour...

PT-2026-100526

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101353

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100412

Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95239

Name of the Vulnerable Software and Affected Versions Easy Form Builder by WhiteStudio versions prior to 4.2.0 Description Certain form types in the plugin fail to validate submitted values against the stored configuration. This flaw allows unauthenticated users to bypass registration policies an...

PT-2026-100975

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100377

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100682

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101900

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102131

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100067

Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101180

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100432

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100748

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100119

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-105774

The generated activate bash/zsh and activate.fish scripts interpolate a shlex.quote-ed value into a position that quotes it a second time. The extra quotes terminate the quoted run early and leave part of the value parsed as shell code, so a path containing shell metacharacters runs commands when...

PT-2026-101182

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102033

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101039

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101997

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100246

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102113

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100278

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102237

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100984

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95651

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The run maintenance function handles exceptions outside the loop that processes rows from part config. Consequently, an exception triggered by one partition set terminates the loop immediately,...

PT-2026-101230

Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100570

Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95274

The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'unique' parameter in all versions up to, and including, 4.6.5 due to insufficient input sanitization and outpu...

PT-2026-101017

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101911

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95264

Name of the Vulnerable Software and Affected Versions QcalAgent versions prior to 1.1.9 Description A cross-site scripting XSS issue allows local attackers to bypass security mechanisms or read application data. Cross-site scripting is a type of security flaw where malicious scripts are injected...

PT-2026-100839

Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95448

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...