4270 matches found
CVE-2026-54399: Uncontrolled Resource Consumption
Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive...
OPENSUSE-SU-2026:11157-1 perl-CSS-Minifier-XS-0.140.0-1.1 on GA media
These are all security issues fixed in the perl-CSS-Minifier-XS-0.140.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55175
These are all security issues fixed in the hauler-2.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11154-1 hauler-2.0.1-1.1 on GA media
These are all security issues fixed in the hauler-2.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11159-1 python311-jupyter-server-2.20.0-1.1 on GA media
These are all security issues fixed in the python311-jupyter-server-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55178
These are all security issues fixed in the perl-CSS-Minifier-XS-0.140.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55182
These are all security issues fixed in the radvd-2.21-1.1 package on the GA media of openSUSE Tumbleweed...
WordPress Plugin for Google Analytics by IO technologies plugin <= 1.1 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin Plugin for Google Analytics by IO technologies versions = 1.1...
PT-2026-53937
Name of the Vulnerable Software and Affected Versions dash versions prior to 0.5.13.4-1.1 Description An integer overflow occurs when dividing INTMAX MIN by -1. Additionally, the software may execute code even when the -n noexec option is specified. Recommendations Update to version 0.5.13.4-1.1...
CVE-2026-58055: Inconsistent Interpretation of HTTP Requests
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting...
OPENSUSE-SU-2026:11139-1 chromedriver-149.0.7827.200-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.200-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-53655
Name of the Vulnerable Software and Affected Versions calibre versions prior to 9.10.0 Description A flaw exists where reading metadata from a malicious EPUB, OPF, or PDF file allows the execution of arbitrary Python code. This occurs when a custom column definition containing a python: template ...
corepack24-24.17.0-1.1 on GA media (moderate)
corepack24-24.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11121-1 Rating: moderate Cross-References: CVE-2026-11525 CVE-2026-12151 CVE-2026-2581 CVE-2026-27135 CVE-2026-40170 CVE-2026-42338 CVE-2026-48615 CVE-2026-48617 CVE-2026-48618 CVE-2026-48619 CVE-2026-48928 CVE-2026-48930...
OPENSUSE-SU-2026:11120-1 nano-9.1-1.1 on GA media
These are all security issues fixed in the nano-9.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-28898: Improper Encoding or Escaping of Output
swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message. swift-nio-http2 1.44.1 adds validation of all pseudo-header values :path, :authority, :scheme, :method, and :status at both the HPACK...
OPENSUSE-SU-2026:11114-1 gvim-9.2.0530-1.1 on GA media
These are all security issues fixed in the gvim-9.2.0530-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11107-1 containerd-1.7.33-1.1 on GA media
These are all security issues fixed in the containerd-1.7.33-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11072-1 MozillaThunderbird-140.12.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed...