43759 matches found
CLSA-2026-1790161376 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.1...
CLSA-2026-1790159292 TuxCare security update for org.springframework.security (8 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 8 CVEs. Fixed in 6.3.9-tuxcare.1...
CVE-2026-63452
A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. A remote attacker can exploit this vulnerability by sending repeated, small Brotli compressed responses to the HTTP/1 parser. This can cause the system to perform expensive decompression...
Vulnerabilities found in Check Point VPN products
Check Point has addressed 2 critical vulnerabilities. The vulnerability with the identifier CVE-2026-85102 has a CVSS score of 9.8. This vulnerability resides in the VPN negotiation process of the Quantum Security Gateway and is caused by incorrect validation of certificate trust. As a result, an...
CLSA-2026-1790132153 TuxCare security update for com.google.guava (1 CVE)
TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 19.0-rc3-tuxcare.1...
MAL-2026-16422 Malicious code in @httttt/mcp-npx-fetch-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73432c5cbb8e74b1a4b66e91fdbde0eda311176dbef0301b13605d75bdd299ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-67235: Allocation of Resources Without Limits or Throttling
RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against maxmessagesize. The size check ran only when assembly completed. By declaring bodysize = 2^63-1 and then streaming...
PT-2026-97559
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.15 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.3.1 Description An authenticated stream client with read access to any stream...
CVE-2026-66079: Allocation of Resources Without Limits or Throttling
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parsearrayprimitive/2 for constructor 0x45 list0 returns an element with byte-width B = 0. The enclosing array32 parser at line 148 reads a 4-byte Count from the wire and loops Count times consumin...
CVE-2026-66072: Uncontrolled Resource Consumption
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, getchunkselector/1 calls binarytoatom on the raw client-supplied property from post-auth subscribe and resolveoffsetspec frames, with no whitelist and no existing guard. An authenticated...
CVE-2026-67228: Uncontrolled Resource Consumption
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component segment to an atom with rabbitdatacoercion:toatom/1 in lookupcomponent/1 deps/rabbit/src/rabbitruntimeparameters.erl, creating a new atom for any previous...
PT-2026-97583
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.15 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.3.0 Description An issue exists in the trust-store plugin where the verify fun...
PT-2026-97566
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.2.7 RabbitMQ versions prior to 4.3.1 Description An authenticated AMQP 0-9-1 client can crash the Erlang VM, affecting all vhosts and connections, by sending approximately 1 million requests. The issue occurs when...
PT-2026-97585
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.3.0 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 3.13.15 Description An authenticated AMQP 0-9-1 client with publish permissions ca...
CVE-2026-67220: Uncontrolled Resource Consumption
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic exchange, addbinding/3 reads the rjmserlangselector argument and passes it through erlscan:string/1 then erlparse:parseterm/1. erlscan:string/1 intern...
CLSA-2026-1790089638 TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 33 CVEs. Fixed in 5.3.9-tuxcare.1...
OPENSUSE-SU-2026:21909-1 Security update for libXrender
This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow bsc1280911...
CVE-2026-63276
LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...