9188 matches found
OSV-2026-209 Use-of-uninitialized-value in ntrip_parse_url
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482281265 Crash type: Use-of-uninitialized-value Crash state: ntripparseurl FuzzClient.c...
PT-2026-7150
Name of the Vulnerable Software and Affected Versions Axios versions prior to 0.30.3 Axios versions prior to 1.13.5 Description The mergeConfig function in Axios crashes with a TypeError when processing configuration objects that contain proto as an own property. This occurs because when proto is...
PT-2026-20361
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482281265 Crash type: Use-of-uninitialized-value Crash state: ntrip parse url FuzzClient.c...
Atheros Wireless Driver Heap Buffer Overflow DoS
The vulnerability of the ath12kdpmonrxparsestatustlv function in the drivers/net/wireless/ath/ath12k/dpmon.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker...
Security Bulletin: qs parse module DoS vulnerability: arrayLimit bypass via bracket notation allows memory exhaustion (qs < 6.14.1)
Summary An input validation flaw in qs 6.14.1 allows attackers to bypass arrayLimit using bracket notation a=x, leading to unauthenticated HTTP denial-of-service via memory exhaustion. Vulnerability Details CVEID:CVE-2025-15284 DESCRIPTION: Improper Input Validation vulnerability in qs parse...
OSV-2026-203 Segv on unknown address in glslang::TIntermediate::addSymbol
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481635421 Crash type: Segv on unknown address Crash state: glslang::TIntermediate::addSymbol glslang::HlslParseContext::handleFunctionCall glslang::HlslParseContext::transformEntryPoint...
Linux Distros Unpatched Vulnerability : CVE-2025-58190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an...
AZL-76827 CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
DEBIAN-CVE-2025-58190
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76878 CVE-2025-58190 affecting package helm for versions less than 3.14.2-10
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-77064 CVE-2025-58190 affecting package packer for versions less than 1.9.5-13
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76988 CVE-2025-58190 affecting package influxdb for versions less than 2.7.5-13
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-77093 CVE-2025-58190 affecting package sriov-network-device-plugin for versions less than 3.7.0-5
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-77010 CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76874 CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76889 CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-77000 CVE-2025-58190 affecting package keda for versions less than 2.14.1-11
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76880 CVE-2025-58190 affecting package cf-cli for versions less than 8.7.11-5
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76913 CVE-2025-58190 affecting package containerized-data-importer for versions less than 1.62.0-2
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76901 CVE-2025-58190 affecting package cni-plugins for versions less than 1.4.0-5
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...