Open Source Vulnerabilities

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

trapperkeeper-authorization-clojure, trapperkeeper-authorization-clojure, trapperkeeper-authorization-clojure

puppet-agent, puppet-agent

puppet

CVE-2026-115731 affecting package puppet 7.34.0-1

puppetserver, puppetserver, puppetserver

tinyusb, tinyusb

tinyusb, tinyusb

puppet, puppet, puppet, puppet, puppet

Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)

Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

Silverstripe MFA: Can bypass MFA during password reset flow

langfuse-fips-4-worker

Terragrunt catalog predictable temp symlink clobber

Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()

CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

stanza

Stanza: RCE via pickle deserialization in the lemmatizer

io.netty:netty-all, io.netty:netty-bom, io.netty:netty-buffer, io.netty:netty-codec, io.netty:netty-codec-dns, io.netty:netty-codec-haproxy, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-memcache, io.netty:netty-codec-mqtt, io.netty:netty-codec-redis, io.netty:netty-codec-smtp, io.netty:netty-codec-socks, io.netty:netty-codec-stomp, io.netty:netty-codec-xml, io.netty:netty-common, io.netty:netty-dev-tools, io.netty:netty-example, io.netty:netty-handler, io.netty:netty-handler-proxy, io.netty:netty-microbench, io.netty:netty-parent, io.netty:netty-resolver, io.netty:netty-resolver-dns, io.netty:netty-resolver-dns-native-macos, io.netty:netty-tarball, io.netty:netty-testsuite, io.netty:netty-testsuite-autobahn, io.netty:netty-testsuite-http2, io.netty:netty-testsuite-native, io.netty:netty-testsuite-native-image, io.netty:netty-testsuite-native-image-client, io.netty:netty-testsuite-native-image-client-runtime-init, io.netty:netty-testsuite-osgi, io.netty:netty-transport, io.netty:netty-transport-blockhound-tests, io.netty:netty-transport-native-epoll, io.netty:netty-transport-native-kqueue, io.netty:netty-transport-native-unix-common, io.netty:netty-transport-native-unix-common-tests, io.netty:netty-transport-rxtx, io.netty:netty-transport-sctp, io.netty:netty-transport-udt

TuxCare security update for io.netty (22 CVEs)

Stanza: RCE via pickle deserialization in the lemmatizer

TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser

docker-buildx, docker-buildx

nut, nut, nut

docker-buildx, docker-buildx, docker-buildx, docker-buildx, docker-buildx

nut, nut, nut

TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()

org.springframework.security:spring-security-config, org.springframework.security:spring-security-core

TuxCare security update for org.springframework.security (1 CVE)

node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

io.netty:netty-codec-http, io.netty:netty-codec-redis

TuxCare security update for io.netty (5 CVEs)

Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace

org.springframework.security:spring-security-web

TuxCare security update for org.springframework.security:spring-security-web (1 CVE)

upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution