🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1448 Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1461 Related CVEs: CVE-2026-0966 CVE-2026-0968 CVE-2026-0964 CVE-2026-0967 CVE-2025-8114 CVE-2025-8277 CVE-2025-4878 CVE-2025-5318 +5 more Upstream summary: libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966) Table of contents Symptom & Impact […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-402 Related CVEs: CVE-2023-46847 CVE-2026-32748 CVE-2026-33526 CVE-2025-62168 CVE-2025-59362 CVE-2023-49285 CVE-2023-49288 CVE-2023-5824 +12 more Upstream summary: Due to a buffer overflow bug Squid is vulnerable to a Denial of Service attack […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3254 Related CVEs: CVE-2024-28102 CVE-2026-39373 CVE-2023-6681 Upstream summary: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server memory by sending crafted […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1708 Related CVEs: CVE-2026-46300 CVE-2025-71269 CVE-2026-22986 CVE-2026-23302 CVE-2026-23374 CVE-2026-23389 CVE-2026-23442 CVE-2026-31407 +12 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2772 Related CVEs: CVE-2025-0840 CVE-2020-35448 CVE-2021-20284 CVE-2021-20294 CVE-2021-3487 Upstream summary: A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1451 Related CVEs: CVE-2026-2604 Upstream summary: The Evolution backend server exposes the D-Bus service org.gnome.evolution.dataserver.AddressBook, that can be used in order to manage contacts. A Flatpak application with access to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1540 Related CVEs: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753 CVE-2026-28755 CVE-2026-32647 CVE-2023-44487 CVE-2026-1642 +6 more Upstream summary: When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-107 Related CVEs: CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 CVE-2026-4367 CVE-2023-43786 CVE-2023-43787 CVE-2023-43789 CVE-2023-43788 Upstream summary: A flaw was found in libXpm. When processing a file with width of 0 and a very […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-161 Related CVEs: CVE-2025-23248 CVE-2025-23255 CVE-2025-23271 CVE-2025-23273 CVE-2025-23274 CVE-2025-23275 CVE-2025-23308 CVE-2025-23338 +3 more Upstream summary: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a […]
