https://patchobserver.com/news/vulnerabilities/django-rest-framework-token-deletion-flaw-leaves/Patch Observeren2026-10-22T16:27:35ZDjango REST Framework Token Deletion Flaw Leaves Credentials Activehttps://patchobserver.com/news/vulnerabilities/pillow-tario-flaw-causes-infinite-loop-and-cpu/Patch Observeren2026-10-22T16:16:47ZPillow TarIO flaw causes infinite loop and CPU exhaustion in Python appshttps://patchobserver.com/news/vulnerabilities/unauthenticated-attackers-can-steal-api-keys-in/Patch Observeren2026-10-22T02:02:49ZUnauthenticated Attackers Can Steal API Keys in Obot Before 0.26.0https://patchobserver.com/news/vulnerabilities/orgs-at-risk-churchope-theme-path-traversal-leaks/Patch Observeren2026-10-22T01:46:48ZOrgs at Risk: ChurcHope Theme Path Traversal Leaks Config Data and Passwordshttps://patchobserver.com/news/vulnerabilities/eyelock-biometric-devices-exposed-to/Patch Observeren2026-10-22T01:21:58ZEyeLock Biometric Devices Exposed to Unauthenticated File Thefthttps://patchobserver.com/news/vulnerabilities/splunk-enterprise-flaw-lets-users-bypass-search/Patch Observeren2026-10-21T23:13:10ZSplunk Enterprise flaw lets users bypass search safeguardshttps://patchobserver.com/news/vulnerabilities/node-js-services-face-high-severity-dos-risk-from/Patch Observeren2026-10-21T22:28:53ZNode.js Services Face High-Severity DoS Risk from Unpatched adm-zip Versions Before 0.6.1https://patchobserver.com/news/vulnerabilities/perl-net-libssh-flaw-allows-unverified-server/Patch Observeren2026-10-21T22:16:55ZPerl Net::LibSSH flaw allows unverified server connections in versions before 0.004https://patchobserver.com/news/vulnerabilities/node-js-toml-parser-flaw-blocks-event-loop-fix/Patch Observeren2026-10-21T20:46:36ZNode.js TOML Parser Flaw Blocks Event Loop, Fix Available in 5.0.1https://patchobserver.com/news/vulnerabilities/mongodb-compass-flaw-allows-arbitrary-code/Patch Observeren2026-10-21T18:39:58ZMongoDB Compass Flaw Allows Arbitrary Code Execution on View Edithttps://patchobserver.com/news/vulnerabilities/crewai-framework-rce-flaw-requires-agent-loading/Patch Observeren2026-10-21T18:16:15ZCrewAI Framework RCE Flaw Requires Agent Loading Fixhttps://patchobserver.com/news/vulnerabilities/orgs-hit-by-dos-moov-io-signedxml-1-4-1-fixes-cve/Patch Observeren2026-10-21T18:06:07ZOrgs hit by DoS: moov-io signedxml 1.4.1 fixes CVE-2026-113729 XML memory crashhttps://patchobserver.com/news/vulnerabilities/organisations-urged-to-update-virtualenv-to-fix/Patch Observeren2026-10-21T17:58:49ZOrganisations urged to update virtualenv to fix high-severity bash command execution flawhttps://patchobserver.com/news/vulnerabilities/mcp-sdk-cve-2026-111767-leaks-shared-session-data/Patch Observeren2026-10-21T08:56:43ZMCP SDK CVE-2026-111767 Leaks Shared Session Data; Patch 1.32.0 Fixes Isolation Failure for Usershttps://patchobserver.com/news/vulnerabilities/patch-python-tls-bundles-now-to-stop-mitm-attacks/Patch Observeren2026-10-21T08:56:43ZPatch Python TLS Bundles Now to Stop MITM Attacks via Compromised Roothttps://patchobserver.com/news/vulnerabilities/chrome-156-stable-release-patches-353-flaws/Patch Observeren2026-10-21T08:27:38ZChrome 156 stable release patches 353 flaws including critical memory corruptionhttps://patchobserver.com/news/vulnerabilities/php-users-must-patch-two-critical-rce-flaws-by/Patch Observeren2026-10-21T07:37:48ZPHP Users Must Patch Two Critical RCE Flaws by October 21https://patchobserver.com/news/vulnerabilities/tenda-ac19-firmware-16-03-10-07-faces-critical/Patch Observeren2026-10-21T07:16:37ZTenda AC19 Firmware 16.03.10.07 Faces Critical Remote Overflow Riskhttps://patchobserver.com/news/vulnerabilities/unauthenticated-oracle-soa-suite-flaw-allows-full/Patch Observeren2026-10-21T05:55:19ZUnauthenticated Oracle SOA Suite Flaw Allows Full System Takeoverhttps://patchobserver.com/news/vulnerabilities/java-sdk-flaw-exposes-task-data-verify-1-3-0/Patch Observeren2026-10-21T04:50:16ZJava SDK flaw exposes task data; verify 1.3.0.Final release statushttps://patchobserver.com/news/vulnerabilities/network-admins-totolink-x2000r-firmware-flaw/Patch Observeren2026-10-21T04:29:08ZNetwork admins: Totolink X2000R firmware flaw enables authenticated remote code execution via DHCP setuphttps://patchobserver.com/news/vulnerabilities/orgs-urged-to-update-a2a-java-sdk-to-1-3-2-final/Patch Observeren2026-10-21T04:21:16ZOrgs urged to update A2A Java SDK to 1.3.2.Final to prevent custom auth header leaks during redirectshttps://patchobserver.com/news/vulnerabilities/totolink-x2000r-firmware-flaw-lets-attackers/Patch Observeren2026-10-21T03:48:48ZTotolink X2000R Firmware Flaw Lets Attackers Install Arbitrary Codehttps://patchobserver.com/news/vulnerabilities/organisations-urged-to-patch-php-5-8-ahead-of-oct/Patch Observeren2026-10-21T02:46:49ZOrganisations urged to patch PHP 5-8 ahead of Oct 21 fixes after critical RCE flaws leak earlyhttps://patchobserver.com/news/vulnerabilities/totolink-x2000r-router-exposed-to-critical-remote/Patch Observeren2026-10-21T01:42:23ZTotolink X2000R Router Exposed to Critical Remote Code Execution Flawhttps://patchobserver.com/news/vulnerabilities/totolink-x2000r-buffer-overflows-pose-severe-risk/Patch Observeren2026-10-21T00:47:36ZTotolink X2000R Buffer Overflows Pose Severe Risk to Managed Networks via Remote Code Executionhttps://patchobserver.com/news/vulnerabilities/ibm-datastage-flaw-lets-attackers-bypass/Patch Observeren2026-10-21T00:19:33ZIBM DataStage flaw lets attackers bypass encryption and poison tenant datahttps://patchobserver.com/news/vulnerabilities/critical-command-injection-flaw-in-totolink/Patch Observeren2026-10-20T21:42:42ZCritical Command Injection Flaw in Totolink X2000R Firmware Exposes Users to Remote Code Executionhttps://patchobserver.com/news/vulnerabilities/apache-couchdb-3-5-3-fixes-high-severity/Patch Observeren2026-10-20T20:30:28ZApache CouchDB 3.5.3 Fixes High-Severity Decompression Bomb Vulnerabilityhttps://patchobserver.com/news/vulnerabilities/apostrophe-cms-prototype-pollution-causes/Patch Observeren2026-10-20T18:27:36ZApostrophe CMS Prototype Pollution Causes Persistent Denial of Servicehttps://patchobserver.com/news/vulnerabilities/orgs-using-apache-tomcat-11-must-upgrade-to-11-0/Patch Observeren2026-10-20T18:15:50ZOrgs Using Apache Tomcat 11 Must Upgrade to 11.0.27 to Stop Data Leaks From Buffer Under-Read Flawhttps://patchobserver.com/news/vulnerabilities/python-certifi-update-removes-emsign-root/Patch Observeren2026-10-20T17:27:32ZPython certifi Update Removes emSign Root Certificate in Critical Patchhttps://patchobserver.com/news/vulnerabilities/solarwinds-observability-self-hosted/Patch Observeren2026-10-20T16:51:25ZSolarWinds Observability Self-Hosted Authorization Flaw Allows Data Modification