Serial number: AV26-1007 Date: October 7, 2026 As of October 6, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3.18.0 Prior to 3.18.16 3.19.0 Prior to 3.19.13 3.20.0 Prior to 3.20.9 3.21.0 Prior to 3.21.7 3.22.0 Prior to 3.22.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Read the full article at Canadian Centre for Cyber Security →
Source attribution: headline and facts are from Canadian Centre for Cyber Security (cyber.gc.ca). Summary method: excerpt of the source description. See our source attribution policy.
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the samtools package. These have all been fixed in a new release 1.25…
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the HTSlib package. These have all been fixed in a new release 1.25 and…
In August, SonarQube Hunter Agent became generally available on SonarQube Cloud, giving teams a way to find the security flaws that pattern-based analysis misses. Broken…
Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams monitor vulnerabilities as software changes. The…
Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The…
Posted by Alan Coopersmith on Oct 09 https://github.com/cyrusimap/cyrus-sasl/issues/891 points out there are a number of publicly reported security issues in the Cyrus…