Coverage tagged "Open source".
Posted by Robert Rothenberg on Oct 30 CVE-2026-118988 CPAN Security Group CVE ID: CVE-2026-118988 Distribution: CallBackery Versions: before 0.60.1 MetaCPAN: https://metacpan.org/dist/CallBackery VCS…
Posted by Robert Rothenberg on Oct 30 CVE-2026-87768 CPAN Security Group CVE ID: CVE-2026-87768 Distribution: DateTime-Lite Versions: before 0.8.1 MetaCPAN: https://metacpan.org/dist/DateTime-Lite…
Posted by Henri Salo on Oct 30 There is also related Cursor blog post: https://cursor.com/blog/claude-code-extension-security-notice
Posted by Alexander A. Shvedov on Oct 30 Product: dhcpcd Affected: 10.3.0 as identified in the CVE description; reproduced at commit 2de751b3691642151a4fdc49e444d6b4dc364e98 CWE: CWE-476 (NULL…
Posted by Valtteri Vuorikoski on Oct 30 Apologies for posting a non-open-source item, but since I get the impression that quite a few open-source maintainers use Anthropic products by various means…
Posted by John Haxby on Oct 30 MPTCP can be disabled system-wide on Linux with `sysctl -w net.mptcp.enabled=0` This will, of course, upset programs that require mptcp although[1] suggests that while…
A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The…
arXiv:2610.37734v1 Announce Type: new Abstract: Agent skills, reusable instruction packages centred on a SKILL.md file, extend AI agents on demand, and a single line in a widely copied skill reaches…
arXiv:2610.38617v1 Announce Type: new Abstract: We ask what AI coding agents and AI security harnesses find that deterministic static application security testing (SAST) does not, and what they miss…
Posted by Terence Monteiro on Oct 29 Severity: important Affected versions: - Apache Fineract through 1.15.0 Description: This issue affects Apache Fineract versions up to and including 1.15.0. The…
Posted by Terence Monteiro on Oct 29 Severity: important Affected versions: - Apache Fineract through 1.15.0 Description: Improper Neutralization of Special Elements used in an SQL Command ("SQL…
Posted by Victor Julien on Oct 29 Suricata 8.0.8 was released addressing a number of vulnerabilities. - HIGH: tftp: unbounded transaction retention can cause CPU exhaustion (Issue #9085) - HIGH: sip…
Posted by Alan Coopersmith on Oct 29 Forwarded Message Subject: [security] Protecting against CVE-2026-98432 Date: Thu, 29 Oct 2026 16:34:28 -0700 (PDT) From: Neal Patel To: golang-announce Hi…
Table Of ContentsTable of ContentsDefenderKiller Exploits a Legacy Microsoft DriverImplications for Endpoint SecurityIndicators of Compromise and Technical ArtifactsStay Ahead of EDR Evasion…
In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the…
Posted by Alan Coopersmith on Oct 29 Forwarded Message Subject: [Security-announce][CVE-2026-116566] socket.getaddrinfo() accepts embedded null bytes in host and port Date: Thu, 29 Oct 2026 17:46:30…
Posted by Alexander A. Shvedov on Oct 29 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1593-gfe88c3545-master (confirmed) Commit fe88c3545aadd597b250ccf23271d5d3de50ccc8 Fixed…
Stages of AI adoption by North Korean threat actors AI use across North Korean threat operationsAI-assisted targeting and reconnaissance AI-assisted social engineering and identity deception…
Posted by Jeremy Stanley on Oct 29 OSSA-2026-050: keystonemiddleware access_rules bypass via X-Service-Token :Date: October 29, 2026 :CVE: CVE-2026-115642 Affects - Keystonemiddleware: =10.10.0…
Posted by Andrew Stitcher on Oct 28 Severity: low Affected versions: - Apache Qpid Proton C through 0.40.0 Description: A misconfigured wildcard TLS certificate causes a stack read overflow. This…
