News that matters, without the noise.

CVE-2026-30691

Medium Severity Description Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via

DSA-6284-1 pdns – security update

https://security-tracker.debian.org/tracker/DSA-6284-1

DSA-6283-1 firefox-esr – security update

https://security-tracker.debian.org/tracker/DSA-6283-1

The npm Threat Landscape: Attack Surface and Mitigations (Updated May 20)

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more.

Drupal core – Highly critical – SQL injection – SA-CORE-2026-004

Project:  Drupal core Date:  2026-May-20 Security risk:  Highly critical 20 ∕ 25 AC:None/A:None/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability:  SQL injection Affected versions:  >= 8.9.0

RHSA-2026:19714: Important: rhc-worker-playbook security update

An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat

DSA-6282-1 rsync – security update

https://security-tracker.debian.org/tracker/DSA-6282-1

SVD-2026-0514: Third-Party Package Updates in Splunk AppDynamics Machine Agent – May 2026

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk AppDynamics Machine Agent version 26.4.0,

SVD-2026-0515: Third-Party Package Updates in Splunk User Behaviour Analytics – May 2026

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk User Behaviour Analytics versions 5.4.5,

SVD-2026-0516: Third-Party Package Updates in Splunk Add-on for Tomcat App – May 2026

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Add-on for Tomcat App version

How to Protect Identities and Sessions from Infostealers

RHSA-2026:19705: Important: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.