USN-8234-1: Mako vulnerability
It was discovered that Mako incorrectly handled URIs with double-slash prefixes in TemplateLookup. A remote attacker could possibly
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
3 sources
RHSA-2026:13860: Important: LibRaw security update
An update for LibRaw is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
Connected reporting, one intelligence threadaccess.redhat.com
2 sources
RHSA-2026:13839: Important: nginx security update
An update for nginx is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Connected reporting, one intelligence threadaccess.redhat.com
RHSA-2026:13812: Important: updated RHEL-8 based Middleware Containers container images
Updated RHEL-8 based Middleware Containers container images are now available
2 sources
RHSA-2026:13845: Important: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support,
Connected reporting, one intelligence threadaccess.redhat.com
3 sources
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote
Connected reporting, one intelligence threadsec.cloudapps.cisco.com
2 sources
USN-8233-1: nghttp2 vulnerability
Andrew MacPherson discovered that nghttp2 did not properly validate internal state when the session termination API was called.
Connected reporting, one intelligence threadubuntu.com
USN-8232-1: Django vulnerabilities
It was discovered that Django did not vary cached response headers on cookies when sessions were not modified
2 sources
RHSA-2026:13830: Important: dovecot security update
An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com
OWASP Foundation Unveils Its Strategic Plan for a World Without Insecure Software
The OWASP Foundation is entering a defining moment. This strategic plan outlines how OWASP will move from being
6 sources
RHSA-2026:13677: Moderate: systemd security update
An update for systemd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com