Open Source Vulnerabilities
kdeconnect, kdeconnect, kdeconnect
Gitea OAuth2 account auto-linking takeover through the sign-up form
Gitea OAuth2 account auto-linking takeover through the sign-up form
Gitea Actions fork workflow trust through pull request review commit
Gitea Actions fork workflow trust through pull request review commit
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
libsoup, nmap
Security update for nmap
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (14 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (14 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (21 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (21 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (19 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (19 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (13 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (13 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (16 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (16 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (13 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (13 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (14 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (14 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
io.netty:netty-handler
GHSA-p85m-gvr3-788c: hostname verification skipped on the OpenSSL client path with a plain X509TrustManager when trust-manager wrapping is unavailable (Java 25+). Upstream's fix (in https://github.com/netty/netty/commit/9e05192391, 4.1.137.Final) only adds a check at context creation for an endpoint identification algorithm set with SslContextBuilder.endpointIdentificationAlgorithm(...), which netty added in 4.1.112.Final (0deca94aa1); 4.1.74.Final has no such setting. The other way to ask for hostname verification, SSLParameters on the engine, is the same in 4.1.74.Final and in fixed 4.1.137.Final (it sets SSL_CVERIFY_REQUIRED and leaves the check to the trust manager), and the fix does not change it. CVE-2026-50010, patched above, covers wrapping plain trust managers.
io.netty:netty-handler
GHSA-p85m-gvr3-788c: hostname verification skipped on the OpenSSL client path with a plain X509TrustManager when trust-manager wrapping is unavailable (Java 25+). Upstream's fix (in https://github.com/netty/netty/commit/9e05192391, 4.1.137.Final) only adds a check at context creation for an endpoint identification algorithm set with SslContextBuilder.endpointIdentificationAlgorithm(...), which netty added in 4.1.112.Final (0deca94aa1); 4.1.74.Final has no such setting. The other way to ask for hostname verification, SSLParameters on the engine, is the same in 4.1.74.Final and in fixed 4.1.137.Final (it sets SSL_CVERIFY_REQUIRED and leaves the check to the trust manager), and the fix does not change it. CVE-2026-50010, patched above, covers wrapping plain trust managers.
io.netty:netty-codec-http
GHSA-2g37-3h88-55hc: WebSocketServerExtensionHandler's per-connection queue of negotiated extensions grows without bound with pipelined requests. Upstream's fix (https://github.com/netty/netty/commit/3574f7ed7a, 4.1.138.Final) caps that queue, which was introduced in 4.1.88.Final (https://github.com/netty/netty/commit/f761ab5620, #13180). 4.1.74.Final has no queue there: the handler keeps a single List<WebSocketServerExtension> field that each new upgrade request overwrites, so it cannot grow per request.
io.netty:netty-codec-http
GHSA-2g37-3h88-55hc: WebSocketServerExtensionHandler's per-connection queue of negotiated extensions grows without bound with pipelined requests. Upstream's fix (https://github.com/netty/netty/commit/3574f7ed7a, 4.1.138.Final) caps that queue, which was introduced in 4.1.88.Final (https://github.com/netty/netty/commit/f761ab5620, #13180). 4.1.74.Final has no queue there: the handler keeps a single List<WebSocketServerExtension> field that each new upgrade request overwrites, so it cannot grow per request.
Typemill SvgSanitizer.php saveImage cross site scripting
chromium
Security update for chromium
