Application Platforms & Middleware
Elixir grpc_server 1.0.6 Fixes Streaming Memory ExhaustionNew!!
Elixir grpc_server 1.0.6 fixes streaming memory exhaustion. Upgrade exposed streaming RPC services, check message limits, and retain deployment evidence.
WrenSecurity Fixes CREST _mimeType Cross-Site ScriptingNew!!
Review the project security advisories, match affected dependencies and configuration, deploy supported fixes, and retain application-validation evidence.
Apache Syncope 4.0.9 and 4.1.4 Fix Authorization and Code-Execution FlawsNew!!
Apache publishes security fixes. Match the affected branch and feature use, deploy the supported version, validate operations, and retain change evidence.
Apache Arrow Rust Fixes RunEndEncoded Array Out-of-Bounds ReadsNew!!
Apache publishes security fixes. Match the affected branch and feature use, deploy the supported version, validate operations, and retain change evidence.
Fastify Fixes Proxy Boundaries, Session Validation, and Denial of ServiceNew!!
Review the project security advisories, match affected dependencies and configuration, deploy supported fixes, and retain application-validation evidence.
Apache Wicket Fixes Authorization, Session, Upload, and XSS FlawsNew!!
Apache Wicket fixes authorization, session, upload, and XSS flaws. Match components and versions, upgrade the affected branch, and test access controls.
Apache Camel 4.22.2 Fixes A2A Webhook SSRF
Apache Camel 4.22.2 fixes blind SSRF in A2A push webhooks. Confirm untrusted registration paths, update, restrict egress, and retain evidence.
Apache Qpid Proton C 0.41.1 Fixes Four Security Flaws
Apache Qpid Proton C 0.41.1 fixes four AMQP, SASL, TLS, and parser flaws. Inventory linked applications, update, validate, and retain evidence.
Apache Kafka October Update Fixes Twelve Vulnerabilities
Apache Kafka fixes twelve broker, OAuth, Connect, Streams, and client flaws. Match CVE ranges, update supported branches, validate, and retain evidence.
Ubuntu USN-8890-2 Extends libsoup Fixes to Ubuntu 26.10
Ubuntu USN-8890-2 extends eight libsoup fixes to Ubuntu 26.10. Update libsoup3, restart consumers, test HTTP workflows, and retain evidence.