Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
RHBA-2024:2413
  • Red Hat:enterprise_linux:9::appstream/glibc-benchtests-debuginfo
  • Red Hat:enterprise_linux:9::appstream/glibc-common-debuginfo
  • Red Hat:enterprise_linux:9::appstream/glibc-debuginfo
  • Red Hat:enterprise_linux:9::appstream/glibc-debugsource
  • Red Hat:enterprise_linux:9::appstream/glibc-devel
  • ... 240 more
Red Hat Bug Fix Advisory: glibc bug fix and enhancement update 5 days ago
  • Fix available
  • Severity - 5.9 (Medium)
GO-2026-6305
  • Go/github.com/pocket-id/pocket-id/backend
Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none in github.com/pocket-id/pocket-id/backend 02 Sep
  • No fix available
GHSA-2wvm-8mvp-22qv
  • Go/github.com/pocket-id/pocket-id/backend
Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none 28 Aug
  • Fix available
  • Severity - 4.3 (Medium)
GO-2026-6117
  • Go/github.com/pocket-id/pocket-id/backend
Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method in github.com/pocket-id/pocket-id/backend 18 Aug
  • Fix available
GO-2026-6119
  • Go/github.com/pocket-id/pocket-id/backend
Pocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions in github.com/pocket-id/pocket-id/backend 18 Aug
  • Fix available
RHSA-2026:54272
  • Red Hat:enterprise_linux:8::appstream/abrt
  • Red Hat:enterprise_linux:8::appstream/abrt-addon-ccpp
  • Red Hat:enterprise_linux:8::appstream/abrt-addon-ccpp-debuginfo
  • Red Hat:enterprise_linux:8::appstream/abrt-addon-coredump-helper
  • Red Hat:enterprise_linux:8::appstream/abrt-addon-coredump-helper-debuginfo
  • ... 33 more
Red Hat Security Advisory: abrt security update 13 Aug
  • Fix available
  • Severity - 7.8 (High)
ALSA-2026:54272
  • AlmaLinux:8/abrt
  • AlmaLinux:8/abrt-addon-ccpp
  • AlmaLinux:8/abrt-addon-coredump-helper
  • AlmaLinux:8/abrt-addon-kerneloops
  • AlmaLinux:8/abrt-addon-pstoreoops
  • ... 17 more
Important: abrt security update 12 Aug
  • Fix available
MAL-2026-12331
  • npm/@wololasod/tiny-id
Malicious code in @wololasod/tiny-id (npm) 05 Aug
  • No fix available
MAL-2026-12382
  • npm/finance-business-company-id-models
Malicious code in finance-business-company-id-models (npm) 05 Aug
  • No fix available
CLSA-2026-1784683088
  • TuxCare:npm/@babel/cli
  • TuxCare:npm/@babel/code-frame
  • TuxCare:npm/@babel/compat-data
  • TuxCare:npm/@babel/core
  • TuxCare:npm/@babel/generator
  • ... 145 more
TuxCare security update for 150 packages (1 CVE) 04 Aug
  • Fix available
CLSA-2026-1784769522
  • TuxCare:npm/@babel/cli
  • TuxCare:npm/@babel/code-frame
  • TuxCare:npm/@babel/compat-data
  • TuxCare:npm/@babel/core
  • TuxCare:npm/@babel/generator
  • ... 143 more
TuxCare security update for @babel (2 CVEs) 04 Aug
  • Fix available
CLSA-2026-1784769527
  • TuxCare:npm/@babel/cli
  • TuxCare:npm/@babel/code-frame
  • TuxCare:npm/@babel/compat-data
  • TuxCare:npm/@babel/core
  • TuxCare:npm/@babel/generator
  • ... 141 more
TuxCare security update for 146 packages (1 CVE) 04 Aug
  • Fix available
CLSA-2026-1784683001
  • TuxCare:npm/@babel/cli
  • TuxCare:npm/@babel/code-frame
  • TuxCare:npm/@babel/compat-data
  • TuxCare:npm/@babel/core
  • TuxCare:npm/@babel/generator
  • ... 143 more
TuxCare security update for @babel (1 CVE) 04 Aug
  • Fix available
CLSA-2026-1784509777
  • TuxCare:npm/@babel/cli
  • TuxCare:npm/@babel/code-frame
  • TuxCare:npm/@babel/compat-data
  • TuxCare:npm/@babel/core
  • TuxCare:npm/@babel/generator
  • ... 149 more
TuxCare security update for @babel (1 CVE) 04 Aug
  • Fix available
CLSA-2026-1784596301
  • TuxCare:npm/@babel/cli
  • TuxCare:npm/@babel/code-frame
  • TuxCare:npm/@babel/compat-data
  • TuxCare:npm/@babel/core
  • TuxCare:npm/@babel/generator
  • ... 149 more
TuxCare security update for @babel (1 CVE) 04 Aug
  • Fix available
CLSA-2026-1784336946
  • TuxCare:npm/@babel/cli
  • TuxCare:npm/@babel/code-frame
  • TuxCare:npm/@babel/compat-data
  • TuxCare:npm/@babel/core
  • TuxCare:npm/@babel/generator
  • ... 141 more
TuxCare security update for 146 packages (1 CVE) 04 Aug
  • Fix available