CVE-2026-74517

A flaw was found in KVM Kernel-based Virtual Machine. This vulnerability occurs when the system attempts to process a delayed I/O APIC End-of-Interrupt EOI after the associated virtual CPUs vCPUs have been destroyed. This timing issue results in a Use-After-Free UAF condition, where the system...

CVE-2026-47735: Improper Limitation of a Pathname to a Restricted Directory

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102707 advisory. A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to...

OESA-2026-3448 skopeo security update

A command line utility that performs various operations on container images and image repositories Security Fixes: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result i...

OESA-2026-3445 skopeo security update

A command line utility that performs various operations on container images and image repositories Security Fixes: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result i...

OESA-2026-3433 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: kubescape-server, delve, cosmo-router, kubescape, agentbeat, docker-fips, nerdctl, milvus, docker, opentelemetry-ebpf-instrumentation-fips, beats-fips, cosmo-router-fips, vitess, cilium, containerd-fips, opentelemetry-ebpf-instrumentation, cilium-fips, hubble-fips,...

CVE-2026-72496

A flaw was found in the Linux kernel's RDMA/bnxtre component. When the bnxtqpliballocdpi function attempts to map I/O memory ioremap, it may not properly handle failures. This oversight could lead to system instability or a denial of service DoS condition, as the system might proceed with an...

sqlparse: Quadratic O(n²) DoS in group_comments

SummaryA comment-only statement -- c\nn may cause a Denial of Service DoS. DetailsLocation: sqlparse/engine/grouping.py:331-341 groupcomments, invoked first in group at grouping.py:439. Reachable via sqlparse.parse and sqlparse.formatsql, stripcomments=True.A statement made of many single-line...

PYSEC-2026-3699 sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger

Summary sqlparse ships hard limits MAXGROUPINGDEPTH=100, MAXGROUPINGTOKENS=10000 intended to bound parsing work on attacker-supplied SQL, but the path that reaches those limits is itself Ondepth per token-group construction. A 1-2 KB SQL payload e.g. SELECT 1 ... with 500-2000 nesting levels, or ...

CVE-2026-72315

A flaw was found in the Linux kernel's SMB client cifs. This issue occurs due to a delayed release of dentry reference counts during direct I/O DIO operations. When a file system is unmounted while these operations are still pending, it can lead to a "busy dentry" warning. This prevents the...

PT-2026-80780

Name of the Vulnerable Software and Affected Versions hpack versions prior to 4.2.0 Description Unbounded variable integer decoding can cause run-away computation when processing malformed input, resulting in On^2 runtime. This can effectively block further processing if the unsanitized input is...

CVE-2026-72282

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. The kvmiobusgetdev function, responsible for retrieving I/O bus devices, could return a device that is only matched by its memory address. This creates a race condition where the device might be deallocated before...

CVE-2026-66046

Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...

CVE-2026-66046

Expat through 2.8.3 has quadratic complexity in storeAtts() in xmlparse.c when processing N attributes with non-normalized values, enabling remote unauthenticated DoS via a small XML document. CVSS 7.5 HIGH. No exploitation observed. Fix: upgrade to patched version (PR #1321).

CVE-2026-66046

Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...

CVE-2026-72370

A flaw was found in the Linux kernel's iomap subsystem. When handling atomic direct I/O DIO operations, if a bio a data structure representing I/O requests is built with a size mismatch and subsequently rejected, the kernel's error handling path fails to release the associated memory pages. This...

SUSE CVE-2026-70462

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101963 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: split transactions in dio completion to avoid credit exhaustion During ocfs2 dio operation...

dyen macOS In-Memory Mach-O Loader

dyen is a macOS in-memory Mach-O dynamic library loader designed to execute a dylib using the stock Python interpreter without writing the decrypted Mach-O to disk or registering the payload with dyld. It supports encrypted standalone payloads and encrypted dylibs appended to otherwise valid cove...