ngx_cache_purge 3.0.4 Restricts Symlink Traversal
10/11/2026
ngx_cache_purge 3.0.4 restricts cache-tree symlink traversal. Validate affected NGINX modules, isolate cache writes, update, test, and retain evidence.
Decimal 3.1.2 Fixes Unbounded Rounding Allocation
10/10/2026
Decimal 3.1.2 fixes an unbounded rounding allocation flaw. Find user-controlled places values, upgrade, validate behavior, and retain evidence.
Apache DataSketches C++ 5.3.0 Hardens Five Deserialization Paths
10/10/2026
Apache DataSketches C++ 5.3.0 fixes five deserialization flaws. Find untrusted sketch inputs, upgrade, validate consumers, and retain evidence.
ZTE Z80 Ultra Build B28MR2 Fixes Five Information-Disclosure Flaws
10/10/2026
ZTE fixes five Z80 Ultra information-disclosure flaws in B28MR2. Match NX741J devices, obtain the supported build, validate it, and retain evidence.
AWS Amplify Updates Fix Cross-Owner GraphQL Record Access
10/09/2026
AWS fixes cross-owner access in Amplify GraphQL resolvers. Upgrade affected packages, redeploy backends, validate authorization, and retain evidence.
