2026

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, pamusb-pinentry reads

claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.

uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability ex

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releas

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Limit NVMe request size to 2 MiB Th

In the Linux kernel, the following vulnerability has been resolved: dm-thin: fix metadata refcount underflow There's a

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in create_bi

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix unlocked call to hns_roce_qp_remove()

In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in man

In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink(

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect memcg_path kfree()

In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key ind

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in create_space_info() error

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer leng

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko points

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix data race at accessing runtime.

In the Linux kernel, the following vulnerability has been resolved: ice: fix double free in ice_sf_eth_activate() error

In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware k

In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASK_DEAD task

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error path fall-through in mlx5_ib_d

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_cr

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree() with d

In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_uc

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Disallow all private IOCTL

In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject new tp_meter sessions during tea

In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop tp_meter sessions during mesh tear

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculati

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmt_src during M

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix UAF in inactivity-timer clean

In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in ch

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on unbind The sta

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_

In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_upd

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_release_int

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration fa

An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-519

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vul

Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivile

Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an i

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed

Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R260114104

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command

Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. From 0.

In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion