Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certa…
Use after free in DevTools. (CVE-2025-0762) References: - https://bugs.mageia.org/show_bug.cgi?id=33974 - https://chromereleases.googleblog.com/2025/01/stable-…
Many records in the additional section cause CPU exhaustion. (CVE-2024-11187) DNS-over-HTTPS implementation suffers from multiple issues under heavy query load…
As the cybersecurity landscape continues to evolve, proactive vulnerability management has become a critical priority for managed service providers (MSPs) and …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Path traversal leading to arbitrary .ttf file write. (CVE-2024-12425) URL fetching can be used to exfiltrate arbitrary INI file values and environment variable…
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1236518 Cross-References: * CVE-2023-45288
* bsc#1236460 Cross-References: * CVE-2022-49043
Updated to 132.0.6834.159 * Medium CVE-2025-0762: Use after free in DevTools
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. (CVE-2022-49043) References: - https://bugs.mageia.org/show_bug.cgi?id=33975
An update that fixes one vulnerability is now available.
* bsc#1236460 Cross-References: * CVE-2022-49043
Redis' Lua library commands may lead to remote code execution. (CVE-2024-46981) Redis allows denial-of-service due to malformed ACL selectors. (CVE-2024-51741)
A vulnerability has been discovered in the OpenJDK Java runtime, which may result in authorisation bypass or information disclosure. For the stable distributio…
* bsc#1227769 Cross-References: * CVE-2024-39917
* bsc#1227769 Cross-References: * CVE-2024-39917
* bsc#1236518 Cross-References: * CVE-2023-45288
* bsc#1236272 Cross-References: * CVE-2024-11218 * CVE-2024-9407
* bsc#1236272 Cross-References: * CVE-2024-11218 * CVE-2024-9407
