Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
PHP version 8.4.26 (24 Sep 2026) BCMath: Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds n_scale. (Ilia Alshanetsky) Core:
Update to latest upstream version of WeasyPrint and python-cssselect2. This update fixes CVE-2026-55073 (Server-Side Request Forgery)
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
The maintainers of shell-quote, a JavaScript library for building shell commands, released version 1.11.0 on September 29, 2026, to fix CVE-2026-102422.
Multiple vulnerabilities have been found in expat. CVE-2024-28757 A crafted XML document could trigger an entity expansion attack (billion laughs attack) when …
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities and has two security fixes can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities can now be installed.
An update that solves four vulnerabilities can now be installed.
An update that solves four vulnerabilities can now be installed.
Authen::SASL could be made to crash or run programs if it received specially crafted network traffic.
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system, would could result in denial of servi…
Moderate: gawk security update
Important: gdb security update
Important: thunderbird security update
Moderate: gawk security update
Important: gdb security update
