Follow GitHub Advisories and vulnerabilities in npm, PyPI, Go, Maven and Cargo libraries. Assess dependency risks and learn how to update packages safely.
Rucio is affected by CVE-2026-100397, which lets unauthenticated attackers obtain an SSH challenge token for an administrator account and access APIs with that account’s privileges for 10 seconds. Check installed versions and upgrade to the corresponding fix.
Debian DSA-6625-1 updates postgresql-17 on Debian trixie to address multiple vulnerabilities, including CVE-2026-6460. Reported risks include arbitrary code execution, authentication bypass, information disclosure, denial of service, and privilege escalation. Upgrade to 17.12-0+deb13u1 and…
Microsoft disclosed CVE-2026-111497, an out-of-bounds write in the Brotli decoder used by .NET that could enable elevation of privilege over a network. Exposure requires an application to use Brotli decompression; check affected products and versions, then install the applicable update.
ZDI warns that untrusted-data deserialization in Meta FAIRChem’s utils load_inference_model could allow code execution in the current process if a user opens a malicious file or visits a malicious page. ZDI recommends limiting interaction with the product.
Copyright © 2026 ViSafe (visafe.net) · A blog sharing cybersecurity knowledge
