Cve on DeploySmith https://deploysmith.dev/tags/cve/ Recent content in Cve on DeploySmith DeploySmith https://deploysmith.dev/images/og-default.png https://deploysmith.dev/images/og-default.png Hugo en-US Thu, 05 Nov 2026 00:00:00 +0000 Docker Engine 29.9.3: Full Security Line https://deploysmith.dev/hosting/docker-engine-29-9-security-upgrade/ Thu, 05 Nov 2026 00:00:00 +0000 https://deploysmith.dev/hosting/docker-engine-29-9-security-upgrade/ Docker Engine 29.9.3 closes four CVEs and two BuildKit advisories, capping the 29.9.x line. Upgrade checklist for a Debian/Ubuntu VPS. Next.js Nov 2026 Security Release: Patch to v16.4.5 https://deploysmith.dev/guides/nextjs-november-2026-security-release/ Wed, 04 Nov 2026 00:00:00 +0000 https://deploysmith.dev/guides/nextjs-november-2026-security-release/ Next.js released v16.4.5 and v15.5.29 on Nov 3, 2026: seven advisories, one high, six medium. Table of affected surfaces and the self-hosted fix path. eMudhra CA Compromise: Check Your TLS Chains https://deploysmith.dev/guides/emudhra-ca-client-trust-check/ Mon, 02 Nov 2026 00:00:00 +0000 https://deploysmith.dev/guides/emudhra-ca-client-trust-check/ CVE-2026-111943: eight eMudhra intermediates compromised. Check your VPS's git, curl, Docker and ca-certificates trust store, then update what is stale. CVE-2026-98432: VPS Still Vulnerable to Remote Root https://deploysmith.dev/guides/cve-2026-98432-linux-tcp-use-after-free/ Sun, 01 Nov 2026 00:00:00 +0000 https://deploysmith.dev/guides/cve-2026-98432-linux-tcp-use-after-free/ CVE-2026-98432 - CVSS 9.8 use-after-free in Linux IPv4 TCP. Ubuntu and RHEL haven't shipped a patch yet: check your kernel, apply the filter. GitLab CVE-2026-97229: RCE via CI Regexes https://deploysmith.dev/guides/gitlab-cve-2026-97229-ci-regex-rce/ Thu, 29 Oct 2026 00:00:00 +0000 https://deploysmith.dev/guides/gitlab-cve-2026-97229-ci-regex-rce/ CVE-2026-97229 - CVSS 10.0 RCE via CI/CD regexes. The fix is in Ruby's Onigmo, applied only in official GitLab packages. Check your build. Node2Shell (CVE-2026-111497): the Brotli RCE on VPS https://deploysmith.dev/guides/node2shell-brotli-rce-vps/ Sun, 25 Oct 2026 00:00:00 +0000 https://deploysmith.dev/guides/node2shell-brotli-rce-vps/ Node2Shell (CVE-2026-111497) is a 9.2-CVSS out-of-bounds write in the Google Brotli decoder. It hits Node.js, Bun, Python, Envoy and Istio. Node.js Oct 2026 Security: 26.12.1 and Node 26 LTS https://deploysmith.dev/guides/node-october-2026-security-lts-upgrade/ Sat, 24 Oct 2026 00:00:00 +0000 https://deploysmith.dev/guides/node-october-2026-security-lts-upgrade/ On 21 Oct 2026: 26.12.1, 24.22.1, 22.23.4 closed four HIGH CVEs, and Node 26 becomes Active LTS on 28 Oct. How to upgrade a VPS. nginx 1.31.7 / 1.30.6: Five Security Fixes to Apply https://deploysmith.dev/guides/nginx-1-31-7-1-30-6-security-upgrade/ Sat, 17 Oct 2026 00:00:00 +0000 https://deploysmith.dev/guides/nginx-1-31-7-1-30-6-security-upgrade/ nginx 1.31.7 and 1.30.6 fix five medium-severity CVEs from 14 Oct 2026 - from alias+rewrite overflow to HTTP/3 injection. Check scope and upgrade. Docker 29.8.2 Security Patch: 13 Fixes https://deploysmith.dev/hosting/docker-engine-29-8-2-security-upgrade/ Fri, 02 Oct 2026 00:00:00 +0000 https://deploysmith.dev/hosting/docker-engine-29-8-2-security-upgrade/ Docker Engine 29.8.2 security release: the CVEs it fixes and the upgrade path on a self-hosted Debian/Ubuntu VPS, with restart notes.