Project: Drupal core Project machine name: drupal Date: 2026-October-14 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Proof/TD:Uncommon Vulnerability: Cross-site...
Vendor Advisories
This category highlights official security advisories and bulletins from vendors, including patch notices, product-specific vulnerabilities, remediation guidance, and important updates affecting supported technologies and platforms.
Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker...
An update for hplip is now available for Red Hat Enterprise Linux 9. Red Hat Product Security...
https://security-tracker.debian.org/tracker/DSA-6561-1
https://security-tracker.debian.org/tracker/DSA-6560-1
https://security-tracker.debian.org/tracker/DSA-6559-1
Project: Drupal core Project machine name: drupal Date: 2026-October-14 Security risk: Critical 19 ∕ 25 AC:Basic/A:None/CI:All/II:All/E:Theoretical/TD:Default Vulnerability: Remote code...
An update for ipa is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red...
It was discovered that OpenSSH’s sftp client incorrectly handled paths returned by the server during a recursive...
It was discovered that curl, when built with GnuTLS support, had an out-of-bounds read in the WebSocket...