172945 matches found
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...
python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files
A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...
CVE-2026-18446
fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...
CVE-2026-64607
HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message. Please note this defect does not affect HttpClient based on the async i/o...
CVE-2026-11770
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...
GHSA-MMJF-RQRV-855V vulnerabilities
Vulnerabilities for packages: promitor...
GHSA-724G-MXRG-4QVM vulnerabilities
Vulnerabilities for packages: renovate...
CVE-2026-59870 vulnerabilities
Vulnerabilities for packages: renovate...
CVE-2026-50527 vulnerabilities
Vulnerabilities for packages: promitor...
GHSA-PW53-4WCC-WM6V vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9...
GHSA-CP45-6Q6C-3772 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9...
CVE-2026-16439 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9...
GHSA-JFJ6-75FJ-8934 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2026-59876 vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-F88M-G3JW-G9CJ vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, keep-fips, librechat, langfuse, jitsucom-jitsu, langfuse-fips, homepage, peerdb-ui, tileserver-gl, keep...
GHSA-96FG-W4M5-JGWC vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-727J-G2FH-46CV vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-534Q-W7FF-7VH6 vulnerabilities
Vulnerabilities for packages: firefox...