Security Notices
CISA Publishes Hitachi Energy TRO600 and CoreTec FixesNew!!
CISA published Hitachi Energy TRO600 and CoreTec fixes for four high-severity flaws. Match products, update safely, validate, and retain evidence.
Siemens Mendix SAML Updates Block Assertion ReplayNew!!
Siemens Mendix SAML updates block assertion replay in IdP-initiated flows. Inventory modules, update or disable the flow, validate, and retain evidence.
Elastic Cloud Enterprise 3.8.6 and 4.2.1 Fix Seven FlawsNew!!
Elastic Cloud Enterprise 3.8.6 and 4.2.1 fix seven flaws. Match host and deployment prerequisites, update, validate, and retain evidence.
Nozomi Guardian and CMC 26.4.0 Fix Update-Path Root ExecutionNew!!
Nozomi Guardian and CMC 26.4.0 fix update-bundle root execution. Restrict administrators, update appliances, validate, and retain evidence.
Apache Camel 4.22.2 Fixes A2A Webhook SSRFNew!!
Apache Camel 4.22.2 fixes blind SSRF in A2A push webhooks. Confirm untrusted registration paths, update, restrict egress, and retain evidence.
Apache Qpid Proton C 0.41.1 Fixes Four Security FlawsNew!!
Apache Qpid Proton C 0.41.1 fixes four AMQP, SASL, TLS, and parser flaws. Inventory linked applications, update, validate, and retain evidence.
nvm 0.40.6 Fixes Version-String Command InjectionNew!!
nvm 0.40.6 fixes version-string command injection, including auto-switch hook exposure. Update developer systems, inspect hooks, and retain evidence.