CLEANSTART-2026-KG46723 When returning errors, functions in the net/textproto package would include its input as part of the error

CVE-2026-42507 affects multiple packages. When returning errors, functions in the net/textproto package would include its input as part of the error. See references for individual vulnerability details...

EulerOS 2.0 SP15 : glib2 (EulerOS-SA-2026-3910)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file...

PT-2026-108137

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description An off-by-one error exists in the BSON bulk document writer. This occurs when a document ends at a specific buffer boundary, causing the writer to write one zero byte immediately pas...

PT-2026-108704

Summary The t:jsDecode transformation in Coraza WAF contains an off-by-one error when parsing octal escape sequences. A backslash character was incorrectly included in the octal number buffer, causing strconv.ParseInt to fail for every octal escape sequence and return a null byte instead of the...

PT-2026-108289

Name of the Vulnerable Software and Affected Versions Strawberry GraphQL versions 0.217.0 through 0.326.0 Description In the PermissionExtension.resolve function on a synchronous field resolver, the result of has permission is evaluated for truthiness. If a custom permission defines has permissio...

PT-2026-108127

Name of the Vulnerable Software and Affected Versions enshrined/svg-sanitize versions prior to 1.0.0 Description A logic error exists in the way SVG href values are validated. The isHrefSafeValue function validates the SVG href after XML DTD entity expansion, but the saveXML function serializes t...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System

Summary Due to use of Golang Go multiple vulnerabilities affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2026-39827 DESCRIPTION: An authenticated SSH client that repeatedly opened channels which were rejected by the server...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

EUVD-2026-94532

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851

The golang.org/x/text library, specifically within the x/text/secure/precis component, contains a vulnerability where the Nickname profile can panic due to an out-of-bounds slice error . This occurs when the software attempts to transform crafted input into a short destination buffer. Exploitatio...

CVE-2026-106574

A flaw was found in ImageMagick. An attacker connected to the distributed pixel cache server can send crafted pixel data that triggers an integer calculation error, leading to a heap buffer overwrite. This issue causes the server to crash, resulting in a Denial of Service DoS...

CVE-2026-106571

A flaw was found in ImageMagick. A local attacker can cause a Denial of Service DoS by issuing a specially crafted call to the GetVirtualPixels function. An integer calculation error allows data to be written beyond allocated heap memory boundaries, resulting in an unexpected process crash...

CVE-2026-106567

A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by providing a specially crafted Photoshop Document PSD file for processing. Due to an integer-conversion error in the PSD decoder on 32-bit systems, the application enters an infinite loop, causing it to hang and beco...

CVE-2026-107272

Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view...

CVE-2026-106574

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...