Coverage tagged "Open source".
Posted by Lee Rhodes on Oct 10 Severity: moderate Affected versions: - Apache DataSketches 2.0.0-incubating through 5.2.0 Description: Out-of-bounds read and write in the CPC sketch deserialization…
Posted by Lee Rhodes on Oct 10 Severity: moderate Affected versions: - Apache DataSketches 1.0.0-incubating through 5.2.0 Description: Heap buffer overflow in the HLL sketch deserialization of Apache…
Posted by Alan Coopersmith on Oct 09 https://cert.pl/en/posts/2026/10/CVE-2026-75818/ says:
Deno is joining Cloudflare The Deno team released the first version of celld back in August - their open source implementation of the Durable Objects pattern from Cloudflare Workers.
Posted by Alan Coopersmith on Oct 09 https://marc.info/?l=mutt-users&m=179154210212456&w=2 announces:
Posted by Alan Coopersmith on Oct 09 https://github.com/cyrusimap/cyrus-sasl/issues/891 points out there are a number of publicly reported security issues in the Cyrus SASL project, with no response…
Posted by Dan McDonald on Oct 09 Per https://illumos.topicbox.com/groups/developer/T697a32b688807e56-Mf889eb5783e975446573b373/cve-2026-102916-18491-bhyve-rep-prefix-instr-emulation-fumbles-flags…
Posted by Dan McDonald on Oct 09 Per https://illumos.topicbox.com/groups/developer/T3b859664594b7762-Maa764f8552227c7080bcaabc/cve-2026-104112-to-cve-2026-104117-denial-of-service-and-missing-authoriz…
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over…
Anthropic launches free OSS Scanner, using AI to find open-source vulnerabilities and help maintainers fix bugs before attackers exploit them. Anthropic is launching OSS Scanner, a vulnerability…
Posted by Andrea Cosentino on Oct 09 Severity: CVSS 3.1: 8.8 (high) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected versions: - Apache Camel Karavan 4.0.0 before 4.22.1 Description: Improper…
Posted by Andrea Cosentino on Oct 09 Severity: CVSS 3.1: 8.8 (high) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected versions: - Apache Camel Karavan 3.18.0 before 4.22.1 Description: Improper…
Posted by Stuart Henderson on Oct 09 It is unmaintained: https://github.com/uclouvain/openjpeg/commit/06bbae8b5d5e57f8c28fe862b80a9464b320e314 "This repository should be considered unmaintained…
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our…
Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13 Description: By default, StaxUtils…
Posted by Colm O hEigeartaigh on Oct 09 Severity: important Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13 Description: In Apache CXF…
Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13 Description: In Apache CXF, the…
Posted by Colm O hEigeartaigh on Oct 09 Severity: moderate Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13 Description: Improper…
Posted by Colm O hEigeartaigh on Oct 09 Severity: important Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13 Description: In Apache CXF…
Posted by Colm O hEigeartaigh on Oct 09 Severity: important Affected versions: - Apache CXF 4.2.0 before 4.2.4 - Apache CXF 4.0.0 before 4.1.9 - Apache CXF before 3.6.13 Description: Apache CXF's…
