Information Disclosure

mbedTLS version 3.x (packaged as mbedtls3) on Alpine Linux contains a vulnerability addressed in Alpine package version 3.6.7-r0. The underlying vulnerability details - including attack vector, impact class, and exploitation requirements - are not disclosed in the available intelligence. The only confirmed fact is that Alpine Linux's vendor advisory identifies a fix in the mbedtls3 3.6.7-r0 package. No CVSS score, CWE classification, or exploit status is available at time of analysis.

Vulnerability in .NET 9 Runtime on Alpine Linux was patched in Alpine package version 9.0.18-r0. The specific vulnerability class, impact, and attack surface are not disclosed in the available intelligence - only that Alpine's vendor advisory triggered a package update. No CVSS score, CWE classification, or exploitation details are available at time of analysis, making risk quantification impossible without consulting upstream Microsoft or Alpine advisories directly.

libgit2 on Alpine Linux received a security fix packaged as version 1.9.6-r0, addressing an unspecified vulnerability. The underlying vulnerability type, affected upstream version range, and attacker-reachable impact are not disclosed in the available intelligence. The sole confirmed data point is that Alpine Linux has issued a corrected package; no CVSS scoring, CWE classification, KEV listing, or exploit evidence is present in the source data.

libgit2, the portable C library implementing Git core methods, received a security fix in Alpine Linux package version 1.9.6-r0. The nature, severity, and impact of the underlying vulnerability are not disclosed in available data - only the patched package version is confirmed by the Alpine Linux vendor advisory. No public exploit, KEV listing, CVSS score, or CWE classification is available at time of analysis.

libgit2, the portable C library implementing Git core methods, has a security fix issued in Alpine Linux package version 1.9.6-r0. The nature of the underlying vulnerability is not disclosed in available intelligence - only the fix version and the reporting vendor (Alpine) are confirmed. No CVSS score, CWE classification, or description of impact has been published, leaving the actual risk profile uncharacterized at time of analysis. No public exploit identified at time of analysis.

opam, the OCaml package manager, received a security fix in Alpine Linux package version 2.5.2-r0. The nature of the underlying vulnerability is not disclosed in the available intelligence - no CVE description, CWE classification, CVSS vector, or advisory detail has been published at time of analysis. The fix is confirmed by the Alpine Linux vendor, but the specific impact, attack vector, and affected upstream opam versions cannot be determined from the data provided.

netatalk, an open-source implementation of the Apple Filing Protocol (AFP) used to provide macOS-compatible file sharing on Alpine Linux, has been patched in Alpine package version 4.5.0-r0. The specific vulnerability class, impact, and attack surface are not disclosed in the available intelligence - only the vendor fix notification from Alpine Linux is present. Given netatalk's historical vulnerability profile (which has included remote code execution and authentication bypass classes), this warrants attention from administrators running AFP services, but the precise attacker capability cannot be stated from current data. No public exploit and no CISA KEV listing exist at time of analysis.

netatalk on Alpine Linux has been patched in package version 4.5.0-r0 according to a vendor advisory from Alpine. The nature of the underlying vulnerability - its attack vector, impact class, and affected component - is not determinable from available data. No CVSS score, CWE classification, or technical description has been published alongside this CVE, leaving the specific risk to affected deployments uncharacterized at this time.

mbedtls3 on Alpine Linux received a security fix in package version 3.6.7-r0. The underlying vulnerability type, impact, and affected upstream MbedTLS version range are not described in the available CVE record - only the Alpine package fix version is confirmed. No exploitation status, CVSS score, or CWE classification has been assigned at time of analysis.

Xen Hypervisor is affected by a security vulnerability tracked as XSA-501, which has been remediated in Alpine Linux's xen package at version 4.22.0-r0. The specific nature, impact class, and attack surface of this vulnerability are not disclosed in the available intelligence data - only the patch version and the originating vendor report from Alpine Linux are confirmed. Given the XSA (Xen Security Advisory) designation, this affects Xen's hypervisor stack and may carry implications for guest-to-host or guest-to-guest isolation, though this cannot be confirmed from current data. No active exploitation has been identified at time of analysis.

Xen Hypervisor on Alpine Linux is affected by an uncharacterized security vulnerability addressed by Xen Security Advisory XSA-507. The fix is delivered via Alpine Linux package xen version 4.22.0-r0. The nature of the vulnerability, affected attack surface, and potential impact cannot be determined from available intelligence - only the package-level fix is confirmed by the Alpine vendor.

Xen Hypervisor on Alpine Linux was patched in package version 4.22.0-r0 addressing the issue tracked as XSA-506. The underlying vulnerability details, affected Xen versions, and precise impact are not disclosed in the available intelligence - only the Alpine Linux fix package is identified. Security teams running Xen on Alpine Linux should treat this as a security-relevant update pending full XSA-506 advisory disclosure.

XSA-505 is a Xen Project Security Advisory addressed in Alpine Linux by upgrading the xen package to version 4.22.0-r0. The specific vulnerability class, attack vector, and impact are not disclosed in the available data - the sole confirmed fact is that Alpine Linux vendors have issued a fix. Without the Xen Project's upstream advisory text, the nature of the flaw (e.g., guest-to-host escape, DoS, privilege escalation within a guest) cannot be determined. No public exploit code or CISA KEV listing has been identified at time of analysis.

Xen hypervisor, as packaged in Alpine Linux, was patched in version 4.22.0-r0 addressing the issue tracked as XSA-504 and CVE-2026-62431. The available intelligence is extremely sparse - only the Alpine Linux vendor report confirms a fix was issued; the underlying vulnerability class, attack vector, and impact remain undisclosed in the provided data. No public description, CVSS vector, or CWE has been furnished, making a definitive characterization of exploitability or impact impossible at this time.

Xen Hypervisor is affected by a security vulnerability tracked as XSA-503, addressed in Alpine Linux via the xen 4.22.0-r0 package update. The underlying nature of the flaw - including its attack vector, impact class, and exploitation requirements - is not disclosed in the available intelligence data. Alpine Linux has confirmed the fix through a package update, but no CVSS score, CWE classification, or vulnerability description has been published in the provided data. No public exploit identified at time of analysis.

Alpine Linux has issued a package update fixing an unspecified Xen vulnerability tracked as XSA-502, resolved in the Alpine package xen-4.22.0-r0. The underlying flaw corresponds to Xen Security Advisory 502, but the specific vulnerability class, impact, and affected component have not been disclosed in the available intelligence. Without CVSS scoring, CWE classification, or an upstream XSA advisory body, the precise attacker capability - whether guest escape, privilege escalation, denial of service, or information disclosure - cannot be determined from the data provided.

Xen Hypervisor contains a vulnerability addressed by XSA-500, with Alpine Linux releasing a fix in xen package version 4.22.0-r0. The underlying technical details, affected subsystem, and attacker-achievable impact are not disclosed in the available intelligence - only the patch version and reporting vendor are confirmed. Security teams running Xen on Alpine Linux should apply the available update pending fuller disclosure from the Xen Security Team.

Xen Hypervisor is affected by a security vulnerability tracked as XSA-499 (CVE-2026-62427), addressed in Alpine Linux's xen package at version 4.22.0-r0. The nature, root cause, and impact of the flaw are not disclosed in the available data - the only confirmed intelligence is the Alpine Linux vendor fix. No CVSS scoring, CWE classification, KEV status, or exploit information is available at time of analysis.

Xen Hypervisor on Alpine Linux is affected by a security vulnerability tracked as XSA-499 (CVE-2026-62426), addressed in Alpine's xen package version 4.22.0-r0. The specific vulnerability class, affected Xen upstream version range, and attack impact are not disclosed in the available intelligence - the sole confirmed data point is the Alpine Linux vendor fix. No exploitation status, CVSS score, or CWE classification is available at time of analysis.

Xen Hypervisor on Alpine Linux received a security fix packaged as xen 4.22.0-r0, addressing the issue tracked as XSA-497. The underlying vulnerability details, impact class, and affected attack surface are not disclosed in the available intelligence - only the vendor fix confirmation from Alpine Linux is present. Without the XSA-497 advisory content, the specific impact to confidentiality, integrity, or availability cannot be characterized from this data alone.

Xen Hypervisor contains a vulnerability addressed by XSA-497, fixed in Alpine Linux's xen package at version 4.22.0-r0. The specific nature of the flaw - its attack vector, impact class, and exploitation conditions - is not disclosed in available intelligence; the sole confirmed data point is the Alpine Linux vendor fix. No CVSS score, CWE classification, or detailed technical description is available, preventing characterization of attacker capability or affected scope. No public exploit or CISA KEV listing has been identified at time of analysis.

Xen Hypervisor, as packaged in Alpine Linux, has been patched in version 4.22.0-r0 to address a vulnerability tracked as XSA-497. The specific nature of the flaw - its impact class, affected subsystem, and attacker capability - is not disclosed in the available intelligence. Alpine Linux's vendor advisory confirms the fix but provides no further technical detail, leaving the actual vulnerability behavior uncharacterized at time of analysis.

Xen Hypervisor contains a security vulnerability tracked as XSA-497, addressed in Alpine Linux's xen package version 4.22.0-r0. The specific vulnerability class, affected component, and impact are not disclosed in the available intelligence - only the Alpine Linux vendor advisory confirms a fix exists. Security teams running Xen on Alpine Linux should treat this as a priority patch given the hypervisor attack surface, which can include guest-to-host escapes, privilege escalation, or denial of service depending on the XSA class. No public exploit has been identified at time of analysis.

Xen Hypervisor, as packaged in Alpine Linux, received a security fix in package version 4.22.0-r0 addressing the issue tracked as XSA-497. The underlying vulnerability details, including attack vector, impact class, and affected Xen upstream versions, are not disclosed in the available intelligence - only Alpine's vendor advisory confirms a fix was shipped. Without the full XSA-497 advisory, the scope of exploitation risk cannot be characterized beyond the patch signal itself.

Xen Hypervisor on Alpine Linux contains a vulnerability addressed by XSA-495, patched in Alpine package xen-4.22.0-r0. The specific vulnerability class, affected Xen upstream version range, and attacker impact are not disclosed in the available intelligence - only the Alpine vendor fix is confirmed. Security teams running Xen on Alpine Linux should treat this as a hypervisor-level security issue warranting prompt patching, given that XSA advisories historically cover privilege escalation, information disclosure, or denial-of-service conditions affecting guest-to-host isolation.

Xen hypervisor on Alpine Linux was patched in package version 4.22.0-r0, addressing a security issue tracked as XSA-496 and CVE-2026-42492. The upstream Xen Security Advisory XSA-496 identifies the root cause, but the provided intelligence data contains no description, CVSS vector, CWE, or exploit details, making authoritative impact assessment impossible from this source alone. Security teams should consult the official XSA-496 advisory at xenbits.xen.org for the authoritative vulnerability description and scope.

XSA-498 affects Xen as packaged in Alpine Linux, with a vendor-confirmed fix tracked under CVE-2026-42491. The underlying vulnerability details are not publicly disclosed in the available intelligence - no description, CVSS vector, CWE, or exploit information has been provided. Alpine Linux has issued a package update, but the nature, impact, and exploitability of the flaw cannot be characterized from the data at hand.

py3-aiohttp in Alpine Linux received a security fix packaged as version 3.14.1-r0. The nature of the underlying vulnerability - its attack vector, impact, and exploitation conditions - is not described in the available intelligence. This CVE record is minimal: only the affected package name and the Alpine Linux fix version are confirmed. Security teams should consult the upstream aiohttp changelog and Alpine Linux security advisories for the actual vulnerability details before assessing risk.

Command injection and arbitrary file truncation in the Perl GD module before 2.86 (perl-gd 2.86-r0 on Alpine) arise because GD::Image's _make_filehandle helper opened filenames using Perl's two-argument open(). When an application passes an attacker-influenced filename to constructors like GD::Image->new or newFrom*, prefixes such as `cmd |`, `| cmd`, or `> file` are interpreted by Perl as a command pipe or redirect, yielding command execution or destructive file truncation. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; EPSS is 0.26% (50th percentile).

Denial of service in ImageMagick affects Alpine Linux package versions prior to 7.1.2.24-r0, where improper input validation allows remote attackers to trigger high availability impact without authentication or user interaction. The flaw is tracked under upstream advisory GHSA-8pj9-6897-74xc and was disclosed via Alpine's security tracking. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.

ImageMagick on Alpine Linux has been patched in package version 7.1.2.24-r0, addressing an unspecified vulnerability tracked as CVE-2026-48734. The nature of the flaw - including attack vector, impact class, and affected functionality - is not disclosed in the available intelligence. No CVSS score, CWE classification, or vendor security advisory with technical detail has been published at the time of this analysis, making precise impact assessment impossible without additional data.

strongSwan, the widely deployed open-source IPsec/IKE VPN implementation, received a security fix in Alpine Linux package version 6.0.7-r0 addressing CVE-2026-47895. The nature, severity, and exploitability of the underlying vulnerability are not disclosed in available intelligence - no CVSS score, CWE classification, or technical description has been published at time of analysis. Alpine Linux vendor attribution confirms this is a real security fix, but the impact scope and attack surface remain uncharacterized from provided data.

libheif on Alpine Linux contains a vulnerability addressed in package version 1.23.0-r0. The nature of the flaw - whether memory corruption, input validation failure, or another class - is not disclosed in available intelligence at time of analysis. Alpine Linux vendor advisory confirms a fix exists, but the specific impact, affected component within libheif, and exploitability conditions are not derivable from current data.

Xen hypervisor as packaged in Alpine Linux received a security fix tracked under Xen Security Advisory XSA-492 (CVE-2026-42490). The Alpine Linux vendor has confirmed the issue is resolved in package version 4.21.1-r6. The nature of the vulnerability, affected Xen upstream versions, and attacker impact cannot be characterized from the available data - no CVSS score, CWE classification, or advisory detail has been provided. No public exploit has been identified at time of analysis.

Xen Hypervisor on Alpine Linux has been patched via XSA-492, with the fix distributed in Alpine's xen package version 4.21.1-r6. The vulnerability class, impact scope, and attack vector are not disclosed in the available intelligence data - only the vendor-confirmed fix version is known. Security teams running Xen on Alpine Linux should treat this as a hypervisor-level security fix and prioritize patching given that Xen vulnerabilities historically span privilege escalation, VM escape, and denial-of-service classes.

Xen hypervisor (XSA-494) has been patched in Alpine Linux via the xen package update to version 4.21.1-r6. The underlying vulnerability class, technical root cause, and precise impact are not disclosed in the available intelligence - only the Alpine Linux vendor fix notice and advisory identifier XSA-494 are confirmed. Security teams running Xen on Alpine Linux should treat this as a priority patch given that Xen Security Advisories typically address privilege escalation, guest-to-host escape, or denial-of-service in hypervisor components, though none of these specifics are confirmed for this advisory.

Xen hypervisor on Alpine Linux is affected by a security vulnerability tracked as XSA-491 (Xen Security Advisory 491). The Alpine Linux vendor has issued a patched package at version 4.21.1-r6 to address this issue. No CVSS score, vector, or detailed vulnerability description has been provided in the available intelligence data, making precise impact characterization impossible without referencing the upstream XSA-491 advisory directly.

Xen Hypervisor on Alpine Linux contains a security vulnerability addressed under Xen Security Advisory XSA-493, patched in Alpine package version 4.21.1-r6. The underlying vulnerability class, impact, and affected Xen upstream versions are not disclosed in the available intelligence - only the Alpine-specific fix version is confirmed. No active exploitation (KEV) or public exploit code has been identified at time of analysis.

netatalk on Alpine Linux received a security fix in package version 4.5.0-r0 addressing CVE-2026-49390. The nature of the underlying vulnerability - its attack vector, impact class, and affected functionality - is not disclosed in available public data at time of analysis. No public exploit code or active exploitation has been identified; the sole confirmed data point is an Alpine Linux vendor-sourced package update.

Netatalk on Alpine Linux contains an uncharacterized vulnerability addressed in Alpine package version 4.5.0-r0. The nature of the flaw, affected attack surface, and potential impact are not disclosed in available intelligence - no CVE description, CVSS score, CWE classification, or vendor advisory has been published at time of analysis. Netatalk implements the Apple Filing Protocol (AFP) and has a historical record of critical vulnerabilities including remote code execution and authentication bypass, making any unpatched instance a potential risk in environments serving Apple clients.

XSA-489 affects the Xen hypervisor as packaged in Alpine Linux, with a fix noted in Alpine's security tracking. The underlying vulnerability class, attack vector, and precise impact are not derivable from the available data, which lacks CVSS scoring, CWE classification, and a detailed description. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Xen hypervisor (XSA-487) has been patched in the Alpine Linux package repository, though the specific vulnerability class, impact, and affected version range are not disclosed in the available intelligence data. The advisory originates from the Alpine Linux vendor security team, who reference the upstream Xen Security Advisory XSA-487. Without CVSS scoring, CWE classification, or a detailed description, the nature and severity of this vulnerability cannot be independently assessed from the provided data alone.

Xen hypervisor package in Alpine Linux is affected by the vulnerability tracked as XSA-485 (CVE-2026-31786), for which Alpine Linux has issued a fix. The nature of the vulnerability - its impact, attack vector, and exploitability - cannot be characterized from the available data, which contains only a vendor fix notice with no description, CVSS score, or CWE classification. The 'fixed in 0' notation in the source data is likely a data pipeline artifact and does not represent a meaningful patch version string.

Xen hypervisor, as packaged in Alpine Linux, contains a vulnerability addressed by Xen Security Advisory XSA-489. The nature of the flaw, affected attack surface, and potential attacker impact are not determinable from available data - no description, CVSS vector, CWE, or technical detail has been published at this time. The sole confirmed fact is that Alpine Linux has released a fix for the Xen package in response to XSA-489. No public exploit has been identified at time of analysis.

Xen hypervisor on Alpine Linux is affected by the security issue tracked as XSA-489 (CVE-2026-23561). The Alpine Linux vendor has issued a fix, though the specific vulnerability class, impact, and affected version range are not determinable from the available intelligence. The nature of the flaw - whether it enables privilege escalation, information disclosure, denial of service, or guest escape - cannot be characterized without the upstream Xen Security Advisory XSA-489 details.

Xen hypervisor, as packaged in Alpine Linux, is affected by the vulnerability tracked under Xen Security Advisory XSA-489 (CVE-2026-23560). Alpine Linux's vendor channel has issued a fix for the affected package. No CVSS score, CWE classification, attack vector details, or impact description were provided in the available intelligence, making characterization of severity and exploitability impossible at this time. No public exploit identified at time of analysis, and this CVE is not listed in the CISA KEV catalog based on available data.

Xen hypervisor as packaged in Alpine Linux is affected by a security vulnerability tracked under Xen Security Advisory XSA-489 (CVE-2026-23559). The vendor (Alpine Linux) has issued a fix, listed as version '0' in the source intelligence, which likely reflects a data entry artifact rather than a meaningful version string. No public exploit has been identified at time of analysis, and no KEV listing exists; the actual vulnerability class, impact, and affected version range cannot be confirmed from the available data alone.

Xen Hypervisor (XSA-483) has been patched in Alpine Linux packages, though the full vulnerability details are not yet publicly disclosed. The advisory originates from the Xen Security Advisory series, indicating a security defect in the Xen hypervisor as shipped by Alpine Linux. The nature of the impact - whether guest escape, privilege escalation, denial of service, or information disclosure - cannot be determined from available data at this time.

Xen hypervisor on Alpine Linux is affected by a vulnerability tracked as XSA-478 (CVE-2025-58151). The specific technical nature, impact class, and exploitability details are not available from the provided data - the description contains only a terse package-fix notation with no vulnerability narrative. Alpine Linux vendor intelligence confirms a fix has been issued, but the underlying flaw type, affected scope, and attacker capabilities cannot be characterized without the full XSA-478 advisory.

Xen Hypervisor on Alpine Linux is affected by a security vulnerability tracked as XSA-474 (CVE-2025-58146). The available intelligence is critically sparse: no CVSS vector, no CWE classification, and no descriptive detail about the vulnerability class or impact have been provided in the source data. The Alpine Linux vendor has acknowledged a fix exists, but the reported fix version ('0') is anomalous and likely represents a data artifact or placeholder rather than a valid package version. No public exploit or CISA KEV listing has been identified at time of analysis.

Varnish Cache on Alpine Linux received a security fix packaged as 7.7.2-r0, addressing CVE-2025-8671, also tracked internally by the Varnish project as VSV00017. The vulnerability details, including attack vector, impact type, and affected component, are not disclosed in the available intelligence data. The fix was reported by the Alpine Linux vendor, indicating this is a security-relevant package update. No active exploitation (KEV) or public exploit code has been identified in the provided data.

Varnish Cache on Alpine Linux contains a security vulnerability addressed in package version 7.7.1-r0, tracked as VSV00016 by the Varnish project. The specific vulnerability class, attack vector, and impact are not disclosed in the available intelligence data. No CVSS score or CWE classification has been published at time of analysis, making precise impact characterization impossible without consulting the upstream Varnish Security Advisory VSV00016 directly. No public exploit identified at time of analysis.

Varnish Cache received a security fix packaged as varnish 7.7.0-r0 in Alpine Linux, addressing the vulnerability tracked under Varnish Security Advisory VSV00015. The upstream fix corresponds to Varnish Cache 7.7.0 or a patched variant thereof. Due to the absence of CVSS scoring, CWE classification, and a detailed description in the provided intelligence, the specific vulnerability class, attack vector, and exploitability cannot be independently characterized - only the fix version and advisory identifier are confirmed from the available data. No active exploitation (CISA KEV) or public exploit code has been identified at time of analysis.

Unbound DNS resolver on Alpine Linux received a security fix in package version 1.24.1-r0, addressing an undisclosed vulnerability. The nature, impact class, and exploitability of the underlying flaw are not described in available data - only the patched Alpine package version is confirmed. EPSS stands at 0.07% (22nd percentile), suggesting low current exploitation probability, and this CVE does not appear in the CISA KEV catalog.

Unbound DNS resolver on Alpine Linux received a security fix in package version 1.23.1-r0. The specific vulnerability class, attack vector, and impact have not been disclosed in the available intelligence - the CVE description provides only the fix packaging detail. EPSS at 0.24% (46th percentile) indicates low current exploitation probability, and no active exploitation or public proof-of-concept has been identified at time of analysis.

strongSwan, an open-source IPsec VPN implementation widely deployed for site-to-site and remote-access VPN, contains a vulnerability addressed in Alpine Linux package version 6.0.6-r0. The nature of the vulnerability - its impact, attack vector, and affected component - is not disclosed in the available intelligence. The fix was reported by the Alpine Linux vendor, indicating a package-level patch has been issued, but upstream strongSwan advisory details and technical specifics are absent from the provided data.

strongSwan, an open-source IPsec-based VPN solution packaged for Alpine Linux, was patched in Alpine package version 6.0.6-r0 to address CVE-2026-35333. The underlying vulnerability type, attack vector, and specific impact are not described in the available intelligence - no CVSS score, CWE classification, or detailed description has been published at this time. The sole confirmed data point is that Alpine Linux vendor-released a fix in package version 6.0.6-r0, and no public exploit has been identified at time of analysis.

strongSwan on Alpine Linux was patched in package version 6.0.6-r0, addressing an unspecified vulnerability in this widely-deployed IPsec/IKE VPN implementation. The nature, severity, and exploitability of the underlying flaw are not described in available intelligence - no CVE description, CVSS score, CWE classification, or vendor advisory narrative has been published at time of analysis. Security teams should treat this as a pending-disclosure patch and prioritize upgrade to the fixed Alpine package based on operational exposure of strongSwan services.

strongSwan on Alpine Linux received a security fix packaged as version 6.0.6-r0, addressing an unspecified vulnerability. The nature of the underlying flaw - whether it affects IKEv1/IKEv2 protocol handling, certificate parsing, or another component - is not disclosed in the available data. No CVSS score, CWE classification, or description of attacker capability is available at time of analysis, making independent severity assessment impossible.

strongSwan VPN software on Alpine Linux has been patched in package version 6.0.6-r0, addressing an unspecified vulnerability tracked as CVE-2026-35330. The underlying flaw, attack vector, and exploitability conditions are not disclosed in available intelligence - only the vendor-issued package fix is confirmed. Security teams running Alpine Linux with strongSwan should treat this as a priority patch given that strongSwan handles IPsec/IKE VPN negotiation, a highly privileged network component where vulnerabilities can result in authentication bypass, denial of service, or remote code execution depending on the root cause.

strongSwan on Alpine Linux was patched in package version 6.0.6-r0, addressing an unspecified vulnerability. The underlying nature of the flaw - including its severity, attack vector, and impact class - is not disclosed in the available data. strongSwan is a widely deployed IPsec/IKE VPN daemon, meaning any exploitable vulnerability in this component could carry significant network security implications; however, no severity rating, exploit, or active exploitation has been confirmed from the available intelligence.

strongSwan on Alpine Linux has been patched in package version 6.0.6-r0, addressing an unspecified vulnerability. The nature of the flaw, affected upstream strongSwan versions prior to the fix, and the potential attacker impact are not disclosed in the available intelligence. Given that strongSwan is an IPsec-based VPN solution commonly deployed at network perimeters, any vulnerability in it carries inherent risk to network confidentiality and integrity. No exploit code or active exploitation has been identified at time of analysis.

Squid web proxy on Alpine Linux is affected by a vulnerability addressed in Alpine package version 7.3-r0. The upstream nature and technical mechanism of this vulnerability are not disclosed in available intelligence - the CVE description contains only the fix reference with no detail on impact, attack vector, or affected functionality. Despite sparse public disclosure, the EPSS score of 12.69% (94th percentile) indicates a statistically elevated exploitation probability relative to the broader CVE population, making this a notable tracking priority even in the absence of confirmed active exploitation or a CISA KEV listing.

Samba on Alpine Linux was patched in package version 4.21.9-r0, addressing an unspecified vulnerability reported by the Alpine Linux vendor. The nature of the underlying flaw - whether it involves remote code execution, privilege escalation, information disclosure, or another class of impact - is not determinable from the available data. EPSS scores this at 0.08% (24th percentile), indicating low observed exploitation probability at time of analysis, and no public exploit or CISA KEV listing has been identified.

Jinja2 Python templating library, packaged as py3-jinja2 in Alpine Linux, contains a vulnerability addressed in version 3.1.6. The Alpine Linux vendor advisory confirms a fix was released as package version 3.1.6-r0, indicating a security-relevant defect in prior versions of the library. The nature of the vulnerability - whether sandbox escape, template injection, or another class - is not confirmed from the provided data alone; the GHSA identifier GHSA-CPWX-VRP4-4PQ7 points to a GitHub Security Advisory that may contain fuller details. No public exploit or CISA KEV listing is present in the provided intelligence.

perl-authen-sasl on Alpine Linux received a security fix in version 2.1900, addressing an unspecified vulnerability in the Perl Authen::SASL module. The nature of the flaw, its root cause, and the attacker impact are not disclosed in available intelligence; the sole confirmed data point is the fix version from the Alpine Linux vendor advisory. No public exploit has been identified at time of analysis, and EPSS places this at 0.41% exploitation probability (62nd percentile), suggesting moderate relative interest but low absolute exploitation likelihood.

OpenSSH on Alpine Linux was patched in version 10.1_p1-r0, addressing an unspecified security vulnerability tracked as CVE-2025-61985. The nature of the flaw, affected versions prior to the fix, and the attacker-accessible impact have not been disclosed in the available intelligence. No public exploit has been identified at time of analysis, and the EPSS score of 0.06% (19th percentile) suggests low observed exploitation probability.

OpenSSH on Alpine Linux received a security fix in package version 10.1_p1-r0, addressing an unspecified vulnerability tracked as CVE-2025-61984. The exact nature, attack vector, and impact of this vulnerability are not disclosed in available intelligence sources - no CVE description, CVSS score, or CWE classification has been published at time of analysis. EPSS probability is extremely low at 0.01% (2nd percentile), and no public exploit or CISA KEV listing has been identified.

net-snmp on Alpine Linux received a security fix packaged as version 5.9.5.2-r0, addressing an unspecified vulnerability in the SNMP suite. The upstream vulnerability details - including the attack vector, affected component, and exploitable condition - are not disclosed in the available intelligence; only the Alpine Linux vendor advisory confirms a fix was issued. With an EPSS score of 0.42% (62nd percentile), exploitation probability is low but not negligible, suggesting the issue is real but not yet actively targeted at scale.

mbedtls on Alpine Linux was patched in package version 3.6.5-r0, addressing an unspecified vulnerability. The nature, root cause, and attack surface of the flaw are not disclosed in available intelligence - the CVE record contains only an Alpine Linux changelog-style description with no technical detail. EPSS sits at 0.04% (14th percentile), indicating very low probability of exploitation in the near term. No public exploit code and no CISA KEV listing have been identified at time of analysis.

Mbed TLS on Alpine Linux has been patched in Alpine package version 3.6.5-r0 to address an unspecified vulnerability. The underlying flaw, root cause, and exploitability conditions have not been publicly disclosed by Alpine or upstream maintainers at the time of analysis. No CVSS score, CWE classification, or technical description is available, making precise impact assessment impossible without additional vendor communication. No public exploit identified at time of analysis, and EPSS score of 0.02% (7th percentile) indicates very low community-assessed exploitation probability.

Mbed TLS on Alpine Linux contains a vulnerability addressed by upgrading the Alpine package to version 3.6.4-r0. The specific flaw, its CWE classification, and CVSS severity are not disclosed in available intelligence - only the fix version and affected platform (Alpine Linux) are confirmed. With an EPSS score of 0.43% (63rd percentile), exploitation probability is low in absolute terms, though the percentile ranking places it above the majority of tracked CVEs. No public exploit code or active exploitation has been identified at time of analysis.

Mbed TLS (mbedtls) on Alpine Linux received a security fix in package version 3.6.4-r0, addressing CVE-2025-48965. The nature of the underlying vulnerability - its attack vector, impact class, and root cause - is not disclosed in the available intelligence. No active exploitation has been identified, and the EPSS probability of 0.20% (41st percentile) indicates low observed exploitation interest at time of analysis. Security teams running Alpine Linux with the mbedtls package should treat this as a routine patch cycle item pending further vendor disclosure.

mbedTLS on Alpine Linux contains a vulnerability addressed in the 3.6.4-r0 package release, with a publicly available exploit documented on Exploit-DB. The sparse vendor description provides minimal technical detail, but the combination of a confirmed public exploit and an EPSS score in the 92nd percentile signals meaningful real-world exploitation interest. Systems running Alpine Linux with mbedTLS prior to the 3.6.4-r0 package version are the confirmed affected surface; no CVSS vector or CWE classification was provided to further characterize attack mechanics.

Privilege escalation and information disclosure in the Incus container and VM manager (Alpine Linux package incus-feature, fixed in 7.3.0-r0) lets a low-privileged but authenticated user abuse attacker-controlled file names/paths (CWE-73) to reach data or resources outside their intended boundary, with a scope-changed impact reaching the host. The CVSS 9.9 rating reflects network reachability, low attack complexity, and full compromise of confidentiality, integrity, and availability. No public exploit identified at time of analysis; the issue is tracked in upstream advisory GHSA-fmjx-5j3g-997p.

Alpine Linux: mbedtls fixed in 3.6.1-r0

Alpine Linux: mbedtls fixed in 2.28.7-r0

Alpine Linux: mbedtls fixed in 2.28.7-r0

libsodium on Alpine Linux has been patched in package version 1.0.20-r1, addressing an unspecified vulnerability reported by the Alpine Linux vendor. The nature of the underlying flaw, affected versions prior to the fix, and potential attacker impact are not described in available intelligence. Given libsodium's role as a widely used cryptographic library, any confirmed vulnerability could affect confidentiality, integrity, or availability of applications depending on it, but no concrete impact has been confirmed from current data.

iputils on Alpine Linux has been patched in version 20250602-r0, addressing an unspecified vulnerability in the network utilities package. The exact nature of the flaw - whether it affects ping, tracepath, arping, clockdiff, or another component - is not disclosed in the available intelligence. No active exploitation has been identified at time of analysis, and no CVSS scoring has been published.

GnuTLS, the GNU Transport Layer Security library, contains a security vulnerability addressed by Alpine Linux security advisory GNUTLS-SA-2026-04-29-11. The fix is delivered in Alpine Linux package version 3.8.13-r0. Specific technical details - including the vulnerability class, affected component within GnuTLS, and potential attacker impact - are not available in the provided intelligence data; consumers of this library across TLS-dependent applications on Alpine Linux should treat upgrade as a priority pending upstream disclosure.

GnuTLS, the GNU TLS/SSL and PKI library, received a security fix in Alpine Linux package version 3.8.13-r0 addressing CVE-2026-42014, tracked under GnuTLS security advisory GNUTLS-SA-2026-04-29-9. The specific vulnerability class, impact, and affected functionality are not disclosed in the available intelligence - no CVSS score, CWE, or technical description has been published at the time of analysis. Security teams running Alpine Linux with GnuTLS prior to 3.8.13-r0 should treat this as requiring patch application pending full disclosure. No public exploit has been identified at time of analysis.

GnuTLS on Alpine Linux contains a security vulnerability addressed in package version 3.8.13-r0, identified under GnuTLS Security Advisory GNUTLS-SA-2026-04-27-8. The available intelligence is extremely sparse - no description, CVSS score, CWE classification, or exploit details have been published in the data provided. Alpine Linux has issued a fix, confirming the vulnerability is real and patched, but the nature of the flaw, affected attack surface, and potential impact cannot be characterized from the available data alone. No public exploit code has been identified at time of analysis, and it is not listed in CISA KEV.

GnuTLS, the GNU Transport Layer Security library, contains a vulnerability addressed in Alpine Linux package version 3.8.13-r0, tracked under upstream advisory GNUTLS-SA-2026-04-27-7. The vulnerability description provides no detail on attack type, affected functionality, or attacker-achievable impact beyond confirming a fix exists. No CVSS score, CWE classification, KEV status, or exploit code has been reported - the sole confirmed data point is the patched Alpine package version. Security teams should treat this as an uncharacterized vulnerability in a critical cryptographic library until the upstream GnuTLS advisory is reviewed directly.

GnuTLS, as packaged in Alpine Linux, contains a security vulnerability addressed under advisory GNUTLS-SA-2026-04-29-6. The fix is available in Alpine Linux package version 3.8.13-r0. Due to the absence of CVSS scoring, CWE classification, and a detailed technical description in the available intelligence, the specific vulnerability class, impact, and attack surface cannot be characterised from this dataset alone.

GnuTLS, the widely-deployed TLS/SSL library, received a security fix in Alpine Linux package version 3.8.13-r0 addressing CVE-2026-42010, tracked under vendor advisory GNUTLS-SA-2026-04-29-4. The specific vulnerability class, attack vector, and impact have not been publicly disclosed in the available intelligence at time of analysis. Given GnuTLS's role as a core cryptographic transport library used across numerous Linux applications and services, the potential blast radius of any confirmed vulnerability is significant, warranting prompt patch application regardless of undisclosed severity. No public exploit has been identified at time of analysis.

GnuTLS on Alpine Linux received a security fix tracked under advisory GNUTLS-SA-2026-04-29-2, addressed in Alpine package version 3.8.13-r0. The underlying vulnerability class, attack vector, and exploitability details are not disclosed in the available intelligence - only the fix version is confirmed by the Alpine vendor. No CVSS score, CWE classification, or vulnerability description is present in the sourced data, making independent risk assessment impossible without consulting the upstream GnuTLS advisory directly.

GnuTLS on Alpine Linux contains a vulnerability addressed in Alpine package version 3.8.13-r0, tracked under upstream advisory GNUTLS-SA-2026-04-29-1. The specific vulnerability class, exploitability mechanism, and attacker-achievable impact are not disclosed in the available intelligence - the CVE description contains only patch version metadata with no technical detail. Security teams should treat this as a pending-disclosure situation and apply the available fix proactively given GnuTLS's role as a foundational TLS/cryptographic library. No public exploit has been identified at time of analysis.

GnuTLS, a widely-used TLS/SSL and cryptographic library, was patched in Alpine Linux at package version 3.8.13-r0 to address CVE-2026-33845, tracked under official GnuTLS security advisory GNUTLS-SA-2026-04-29-3. The underlying vulnerability class, attack surface, and exploitability conditions are not disclosed in available intelligence - the sole confirmed fact is that the Alpine vendor released a remediated package. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.

GnuTLS, the GNU TLS/SSL library, contains a vulnerability addressed in Alpine Linux package version 3.8.13-r0, tracked under upstream advisory GNUTLS-SA-2026-04-29-13. The nature of the vulnerability - its attack vector, exploitability, and impact class - is not disclosed in the available intelligence. No CVSS score, CWE classification, or description of the root cause has been published alongside this CVE at time of analysis, making precise characterization of attacker capability infeasible without the upstream advisory.