CVE-2026-43629

llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the statereaddata function computes write size without overflow checking, allowing attackers with write access to the slotsavepath directory to corrupt heap memory. Attackers...

CVE-2026-43629

llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the statereaddata function computes write size without overflow checking, allowing attackers with write access to the slotsavepath directory to corrupt heap memory. Attackers...

UBUNTU-CVE-2026-43629

llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the statereaddata function computes write size without overflow checking, allowing attackers with write access to the slotsavepath directory to corrupt heap memory. Attackers...

@fernir2/saas-kit (>=0.0.173, <=0.0.207), @fernir2/saas-kit-cli (>=0.1.38, <=0.1.40) +1 more potentially affected by CVE-2025-36852 +1 more via @nx/s3-cache (>=5.0.0, <=5.0.7)

@nx/s3-cache NPM version =5.0.0, =0.0.173, =0.1.38, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-gcs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/gcs-cache (>=5.0.0, <=5.0.7)

@nx/gcs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: GHSA-VP3H-GHGH-JR7G...

Nx: Zip-Slip in the self-hosted remote cache

Summary The Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious — or on-path MITM — remote cache server can return a crafted tar archive whose entries escape the cache directory and write to arbitrary locations on the...

NPM: Nx: Zip-Slip in the self-hosted remote cache

NPM: Nx: Zip-Slip in the self-hosted remote cache vulnerability discovered by ? in WordPress Npm nx versions = 20.8.0, 22.7.7...

@fernir2/saas-kit (>=0.0.173, <=0.0.207), @fernir2/saas-kit-cli (>=0.1.38, <=0.1.40) +1 more potentially affected by CVE-2025-36852 +1 more via @nx/s3-cache (>=5.0.0, <=5.0.7)

@nx/s3-cache NPM version =5.0.0, =0.0.173, =0.1.38, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: GHSA-VP3H-GHGH-JR7G...

GHSA-VP3H-GHGH-JR7G Nx: Zip-Slip in the self-hosted remote cache

Summary The Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious — or on-path MITM — remote cache server can return a crafted tar archive whose entries escape the cache directory and write to arbitrary locations on the...

@nx/powerpack-shared-fs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/shared-fs-cache (>=5.0.0, <=5.0.7)

@nx/shared-fs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-azure-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/azure-cache (>=5.0.0, <=5.0.7)

@nx/azure-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-azure-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/azure-cache (>=5.0.0, <=5.0.7)

@nx/azure-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-gcs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/gcs-cache (>=5.0.0, <=5.0.7)

@nx/gcs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-shared-fs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/shared-fs-cache (>=5.0.0, <=5.0.7)

@nx/shared-fs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

CVE-2026-71476

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path MITM remote cache server can return a crafted...

CVE-2026-71476 Nx: Zip-Slip in the self-hosted remote cache

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path MITM remote cache server can return a crafted...

CVE-2026-71476 Nx: Zip-Slip in the self-hosted remote cache

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path MITM remote cache server can return a crafted...

CVE-2026-71476 Nx: Zip-Slip in the self-hosted remote cache

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path MITM remote cache server can return a crafted...

EUVD-2026-54250

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path MITM remote cache server can return a crafted...

CVE-2026-71476

Nx: Zip-Slip in the self-hosted HTTP remote cache. From 20.8.0 up to 22.7.7 and 23.0.2, the self-hosted remote cache extractor can have tar entries escape the output directory, allowing writes to arbitrary locations on the host and potentially remote code execution. This affects workspaces using ...