Watch ·
Bulletin for Tuesday, September 29, 2026
Every morning, what just entered the two registers, and what to do about it. Advisories are grouped by update: one line, one action.
Deal with these first
Critical · 1.3M accounts
KEL (groupe Orisha)Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
Critical · 98,495 accounts
Judo VlaanderenChange that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
Critical · 53,835 accounts
CAPM EuropeExpect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
Today’s breaches 10
Retail4
Nonprofits1
Industry1
Education1
Transport and travel1
Employment and HR1
Digital services1
Today’s advisories 6
code-ollamanpm · CVSS 7.8→ 0.36.1
npm install code-ollama@0.36.1- GHSA-456v-xq2p-r4cjRemote code execution · CVSS 7.8 · <= 0.36.0High
fast-urinpm · CVSS 7.5 · 2 failles→ 2.4.6
npm install fast-uri@2.4.6- CVE-2026-84292Other · CVSS 7.5 · < 2.4.6High
- CVE-2026-84394Server-side request forgery · CVSS 7.5 · = 2.4.5High
tools.jackson.core:jackson-databindMaven · CVSS 7.5→ 3.2.2
- CVE-2026-68497Denial of service · CVSS 7.5 · >= 3.2.0, < 3.2.2High
@angular/platform-servernpm · High→ 22.1.6
npm install @angular/platform-server@22.1.6- CVE-2026-101895Denial of service · >= 22.0.0, < 22.1.6High
@angular/platform-servernpm · High→ 22.1.4
npm install @angular/platform-server@22.1.4- CVE-2026-88058Cross-site scripting · >= 22.0.0, < 22.1.4High
Get the bulletin every morning
The same content, no ads, no tracking: priorities, breaches by sector, advisories by update with the command to copy.
An entry joins the bulletin on the day it reaches the site, not on the date of the advisory or the disclosure: a flaw GitHub published last night is in this morning’s bulletin.