Coverage tagged "Open source".
Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-extension-search) 4.2.0 before 4.2.4 - Apache CXF…
Posted by Colm O hEigeartaigh on Oct 09 Severity: important Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-security-sso-oidc) 4.2.0 before 4.2.4 - Apache CXF…
Posted by Colm O hEigeartaigh on Oct 09 Severity: moderate Affected versions: - Apache CXF (org.apache.cxf:cxf-core) 4.2.0 before 4.2.4 - Apache CXF (org.apache.cxf:cxf-core) 4.0.0 before 4.1.9 -…
Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-security-oauth2) 4.2.0 before 4.2.4 - Apache CXF…
Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-security-sso-oidc) 4.2.0 before 4.2.4 - Apache CXF…
Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and…
Posted by Xen . org security team on Oct 09 Xen Security Advisory CVE-2026-98375 / XSA-522 Linux xen-netfront: backend can crash guest via malformed RX packets ISSUE DESCRIPTION If a RX packet sent…
SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and correspondence, giving them control over…
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms. CrowdStrike published a research on a campaign against…
Today, Recorded Future is announcing AI Infrastructure Indicator Lists, curated datasets for security teams to identify, monitor, and implement controls for AI-related network traffic. AI…
Anthropic announced a new program Thursday that will combine its AI tools with outside cybersecurity companies to find and fix cybersecurity vulnerabilities in critical infrastructure and open-source…
CVE-2026-102489 is an unauthenticated session disclosure vulnerability in Zammad, an open-source helpdesk and customer support ticketing platform. An attacker can obtain connected users’ session…
Posted by TheSecguy on Oct 08 Hello, Short version: OpenJPEG has had a heap-buffer-overflow WRITE fixed on master since 2026-02-10 that has never appeared in a release. Every released version…
Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into…
“AI-analysis evasion” encapsulates the real-world techniques malware authors are developing in attempt to obstruct or defeat any layers of automated AI analysis. This technique is cheap to add but…
IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, their program for patching open source code that companies…
Posted by Demi Marie Obenour on Oct 07 Does this apply to LibreOffice?
Posted by Wenjun Ruan on Oct 07 Severity: critical Affected versions: - Apache DolphinScheduler before 3.4.3 Description: An authorization vulnerability in Apache DolphinScheduler allows…
Posted by Wenjun Ruan on Oct 07 Severity: important Affected versions: - Apache DolphinScheduler 3.1.0 before 3.4.3 Description: An authorization vulnerability in Apache DolphinScheduler allows…
