Multiple security vulnerabilities were identified in the perl-CGI module used in Red Hat Enterprise Linux 10.2 Extended Update Support. These include a denial of service via unenforced request and upload limits, arbitrary file write through unsanitized upload filenames, and a security feature bypass via untainted request parameters. Red Hat has issued an important security advisory with updates to address these issues.
Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat security update. These include numerous use-after-free flaws, sandbox escapes, privilege escalations, information disclosures, spoofing issues, race conditions, and boundary condition errors across various components such as JavaScript GC, DOM, Graphics, Audio/Video, Networking, and Layout. The update is rated as important by Red Hat and targets Red Hat Enterprise Linux 9.8 Extended Update Support.
A use-after-free vulnerability (CVE-2026-33416) in the MinGW Windows Libpng library allows for arbitrary code execution. This security issue affects the mingw-libpng package in Red Hat Enterprise Linux 8. Red Hat has issued a security advisory rating this vulnerability as moderate impact and has released an update to address it.
A path traversal vulnerability (CWE-22) exists in QueueForge ClickMigrate versions prior to 1.0.3. The flaw occurs in the revision command when a crafted migration name is supplied via the -m argument, allowing an attacker to escape the intended migrations directory. This can lead to creation of a .sql file at an arbitrary writable location by the user running the command. Exploitation requires the attacker to influence the migration name, typically through insecure automation or CI/CD pipelines. The issue is fixed in version 1.0.3.
A security vulnerability (CVE-2026-78030) has been identified in the perl-DBI package used in Red Hat Enterprise Linux 8. The flaw involves loading arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in the DBD::DBM driver. This could allow an attacker to load unintended modules, potentially leading to security risks. Red Hat has issued an important security update to address this issue for multiple architectures and extended life cycle releases of RHEL 8.
A denial of service vulnerability exists in fulgur versions from 0.6.0 up to but not including 0.33.0. The issue is caused by quadratic style-list reprocessing during containing-block resolution for absolutely-positioned pseudo-elements when converting untrusted HTML/CSS into PDF. This flaw has been patched in version 0.33.0.
A denial of service vulnerability exists in fulgur versions from 0.4.4 up to but not including 0.29.0. The issue arises from uncontrolled accumulation of CSS string-set named-string values per element without memory limits, allowing crafted documents to consume excessive memory and CPU. This flaw has been fixed in version 0.29.0.
A vulnerability in fulgur versions 0.15.0 through before 0.27.0 allows attackers to cause uncontrolled resource consumption via the CSS counters(name, sep) function during HTML/CSS to PDF conversion. This can lead to CPU and memory exhaustion, resulting in denial of service. The issue is fixed in version 0.27.0.
A security vulnerability identified as CVE-2026-61642 affects the Squid proxy caching server. The issue involves HTTP request smuggling via the Transfer-Encoding header. Red Hat has issued an important security advisory with updates for multiple Red Hat Enterprise Linux 10.2 variants to address this vulnerability.
A security vulnerability (CVE-2026-125712) has been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 9. The issue involves missing bounds checks in the parsing of RTCP SDES packets within the gst-plugins-base component of the GStreamer streaming media framework. Red Hat has issued an important security update to address this flaw.
A use-after-free vulnerability (CVE-2026-125704) exists in the GStreamer core buffer value deserialization component of the gstreamer1 streaming media framework. Red Hat has issued a security update for Red Hat Enterprise Linux 10 to address this issue. The vulnerability is rated as having an Important security impact by Red Hat Product Security.
Paaster, a pastebin application by WardPearce, had a vulnerability prior to version 3.3.0 where its account login lacked rate limiting, lockout, or CAPTCHA protections. Additionally, an endpoint disclosed whether usernames existed and revealed password-hashing salts. This combination allowed attackers to enumerate valid accounts and perform unlimited brute-force password attempts. The issue is fixed in version 3.3.0.
Dell Display and Peripheral Manager (DDPM Windows) versions prior to 2.4.0.17 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. This flaw allows a low privileged local attacker to potentially execute arbitrary code. The vulnerability is addressed in version 2.4.0.17.
Paaster is a pastebin application with a 'view once' paste mode intended to allow a paste to be read only once before it is deleted. Prior to version 3.3.0, this single-use enforcement could be bypassed due to a race condition in the handling of concurrent requests. The flaw arises because the check for whether a paste has been read is performed as a separate read and write operation without atomicity, allowing multiple simultaneous requests to access the paste before it is marked as read. This vulnerability has been fixed in version 3.3.0.
A critical path traversal vulnerability (CWE-22) exists in Portabase versions prior to 1.21.2 in the TUS upload webhook handler. This flaw allows unauthenticated attackers to overwrite arbitrary files within the private data directory, including the sensitive AES-256-GCM master key file. The issue has been fixed in version 1.21.2.
A SQL Injection vulnerability exists in livewire-powergrid versions 6.0.0 up to but not including 6.10.4. The vulnerability arises because the public Livewire property 'sortDirection' is directly interpolated into a raw SQL ORDER BY clause without restricting its values to 'asc' or 'desc'. This allows an attacker to inject arbitrary SQL commands via POST requests to /livewire/update. The issue is fixed in version 6.10.4.
A missing authorization vulnerability in taOS prior to version 1.0.0-beta.23 allows any authenticated non-admin user to execute arbitrary Python code on the backend via the POST /api/skill-exec/{skill_id}/call endpoint. This occurs because the endpoint does not verify admin roles, skill ownership, or agent assignment before executing built-in skills such as code_exec. The flaw enables full remote code execution without privilege escalation beyond a valid non-admin session. The issue is fixed in version 1.0.0-beta.23.
CVE-2026-67548 is a missing authorization vulnerability in taOS (tinyagentos) versions prior to 1.0.0-beta.25. The system settings API routes were exposed without admin authorization checks, allowing any authenticated user, including non-admin users, to read and modify full system configurations. Exploitation enables attackers to overwrite settings, trigger system updates, and cause denial of service through configuration corruption. The issue is patched in version 1.0.0-beta.25.
Red Hat has released a critical security update for the OpenJDK 8 build on Windows, version 8u512, replacing versions 8u502 and 8u504. This update addresses numerous security vulnerabilities across various components of the Java runtime and development kit, including PKCS5 padding, TLS certificate handling, LDAP logins, SASL authentication, HTTP client and server handling, certificate checks, XML processing, image and font rendering, Kerberos validation, and more. The update includes multiple enhancements and fixes to improve security and stability.