CVE-2026-105820 Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution

Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability...

Vault Enterprise ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution

Summary Vault’s ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability...

EUVD-2026-91668

Next.js: Pending use cache fill can leak Draft Mode content into regular responses and persisted pages...

Use of Cache Containing Sensitive Information

Overview next is a react framework. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information via cross-request deduplication in the 'use cache' mechanism, where draft mode state is not accounted for when sharing cached fills between concurrent requests. A...

Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

Pending use cache fills are shared across requests for the same key without distinguishing Draft Mode requests from regular requests. When two such requests overlap, the second request receives the first request's fill: - A regular request that overlaps an editor's Draft Mode request receives...

GHSA-3W37-WQ28-93X7 Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

Pending use cache fills are shared across requests for the same key without distinguishing Draft Mode requests from regular requests. When two such requests overlap, the second request receives the first request's fill: - A regular request that overlaps an editor's Draft Mode request receives...

NPM: Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

NPM: Next.js: Pending use cache fill can leak Draft Mode content into regular responses and persisted pages vulnerability discovered by ? in WordPress Npm next versions = 16.3.0, 16.3.8...

EUVD-2026-91670

Next.js has cache poisoning of SSG and ISR pages in self-hosted applications...

GHSA-4JQV-MC3X-M676 Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

Self-hosted Next.js applications that use the Pages Router with statically generated SSG or incrementally regenerated ISR pages can have a page's cache entry replaced with content from a different route, causing the affected page to serve wrong content to every visitor until the entry is...

Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

Self-hosted Next.js applications that use the Pages Router with statically generated SSG or incrementally regenerated ISR pages can have a page's cache entry replaced with content from a different route, causing the affected page to serve wrong content to every visitor until the entry is...

NPM: Next.js has cache poisoning of SSG and ISR pages in self-hosted applications

NPM: Next.js has cache poisoning of SSG and ISR pages in self-hosted applications vulnerability discovered by ? in WordPress Npm next versions = 15.0.0, 15.5.27...

EUVD-2026-91674

Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service...

Use of Cache Containing Sensitive Information

Overview next is a react framework. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information via insufficient scoping of response cache keys in the server's route caching logic in base-server.ts. Because cache keys are not bound to their source route, a...

Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service

Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regeneration routes can have their shared response cache poisoned by a single unauthenticated crafted request...

NPM: Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service

NPM: Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service vulnerability discovered by ? in WordPress Npm next versions = 15.0.0, 15.5.27...

GHSA-MCJ8-R9MP-W47P Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service

Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regeneration routes can have their shared response cache poisoned by a single unauthenticated crafted request...

CVE-2026-106574

A flaw was found in ImageMagick. An attacker connected to the distributed pixel cache server can send crafted pixel data that triggers an integer calculation error, leading to a heap buffer overwrite. This issue causes the server to crash, resulting in a Denial of Service DoS...

CVE-2026-106570

A flaw was found in ImageMagick. An unauthenticated attacker on an adjacent network can cause a Denial of Service DoS by repeatedly establishing connections to the distributed pixel cache server. This behavior exhausts the pool of available connections, preventing legitimate clients from accessin...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via repeated connections to the distributed pixel cache server. An attacker can exhaust available connections by continuously initiating new connections from an adjacent network, resulting in service disruption...

Heap-based Buffer Overflow

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...