Posts tagged with “vulnerabilities”

Multiple Vulnerabilities Discovered in HAPI FHIR Component Impacting Smile CDR Health Platform

Security researcher Abhinav Agarwal has identified four security vulnerabilities in HAPI FHIR, the widely utilized open-source Java library and server framework implementing the HL7 FHIR standard. These vulnerabilities directly impact Smile Digital Health's Smile CDR clinical data repository and…

Two Critical Wasmtime Vulnerabilities Expose WebAssembly Sandboxes to Escape Risks

The maintainers of Wasmtime, a widely used standalone WebAssembly (Wasm) runtime developed under the Bytecode Alliance, have disclosed two critical security flaws. Tracked with a severe 9.9 out of 10 CVSS score, these vulnerabilities could allow a crafted, malicious WebAssembly module to break out…

The "Tailworm" Threat: Unpatched Tailscale SSH Flaws Can Let a Single Compromised Device Elevate to Root Across Your Entire Network

A recent security disclosure known as the "Tailworm" report, published by researcher Erica Windisch of Cyberdione Labs, has highlighted a series of unpatched vulnerabilities and design concerns affecting Tailscale and its open-source equivalent, Headscale. Testing versions such as…

Widespread Memory-Corruption Flaw in Google’s Brotli Decoder Threatens Node.js, Bun, Python, and .NET Ecosystems

A critical memory-corruption vulnerability residing deep within Google’s Brotli compression library has sent shockwaves through the global software development community. Tracked as CVE-2026-111497 and carrying a critical CVSS score of 9.2, the flaw affects any software package or language runtime…

PHP2Shell: Critical PHP vulnerabilities patched, update now!

The PHP development team has issued an advisory warning of yet another potential Remote Code Execution (RCE) risk, designated as CVE-2026-115560. This new warning follows closely on the heels of emergency patches released just two days prior to address the critical "PHP2Shell" security…