Vulnerabilities
Apache CouchDB 3.5.3 Fixes High-Severity Decompression Bomb Vulnerability
A remote denial-of-service flaw in Apache CouchDB versions below 3.5.3 is fixed in the latest release, requiring immediate updates for exposed systems.
oss-security
Everything Patch Observer has reported about oss-security: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Python certifi Update Removes emSign Root Certificate in Critical Patch
A critical update for the Python certifi library removes the emSign root certificate. Organizations using affected versions must review their dependencies.
Vulnerabilities
Apache Answer Users Must Patch to Stop Incorrect Question Visibility Controls
Apache Answer versions before 2.0.3 contain a logic flaw that allows users with limited permissions to hide or restore questions.
Vulnerabilities
Apache Answer Users Must Patch to Stop Stale Tokens Accessing Private Files
A session flaw in Apache Answer through 2.0.2 allows revoked users to access private uploads until version 2.0.3 is deployed.
Vulnerabilities
Emacs users face residual risk after incomplete patch for CVE-2026-79992
A follow-up vulnerability CVE-2026-108976 indicates the previous remediation for the Emacs editor was insufficient, requiring further attention from IT teams managing these systems.