ROOT-APP-NPM-CVE-2026-33036 CVE-2026-33036 in @rootio/fast-xml-parser - Patched by Root

Root has patched CVE-2026-33036 in the @rootio/fast-xml-parser package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.15 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.15 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.15 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-6345: RHODF 4.19.15 DFBUGS-5942: Backport to odf-4.19.z External Mode: noobaa-default-backing-store is in...

Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty

Summary There are multiple vulnerabilities in Java, JavaScript and IBM WebSphere Application Server Liberty used by IBM Transformation Advisor. Vulnerability Details CVEID:CVE-2026-33151 DESCRIPTION: Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. Prio...

heroic-games-launcher-2.20.1-4.1 on GA media (moderate)

heroic-games-launcher-2.20.1-4.1 on GA media Announcement ID: openSUSE-SU-2026:10462-1 Rating: moderate Cross-References: CVE-2026-33036 CVSS scores: CVE-2026-33036 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-33036 SUSE : 8.7...

CVE-2026-33036 vulnerabilities

Vulnerabilities for packages: saf, kubeflow-pipelines, tileserver-gl, jitsucom-jitsu, renovate, prism...

CVE-2026-33036 vulnerabilities

Vulnerabilities for packages: langfuse, renovate, saf, kubeflow-pipelines, librechat, langfuse-fips, jitsucom-jitsu, dbgate, tileserver-gl-fips, prism, dbgate-fips, kibana, tileserver-gl...

@activepieces/piece-amazon-s3 (>=0.5.4 <=0.5.9), @activepieces/piece-amazon-ses (>=0.0.1 <=0.1.3) +1170 more potentially affected by CVE-2026-33036 via fast-xml-parser (>=5.0.1 <=5.5.5)

fast-xml-parser NPM version =5.0.1, =0.5.4, =0.0.1, =0.5.3, =0.2.1, =13.1.4, =1.0.0, =1.9.12, =1.0.3, =1.1.31, =1.0.0, =1.7.16, =2.33.6, =3.13.0 and more Source cves: CVE-2026-33036 Source advisory: OSV:GHSA-8GC5-J5RX-235R...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2023-33036

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call...

CVE-2023-33036

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call...

CVE-2023-33036 NULL Pointer Dereference in Hypervisor

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call...

CVE-2023-33036 NULL Pointer Dereference in Hypervisor

Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call...

CVE-2023-33036

The CVE-2023-33036 issue affects Qualcomm closed-source components in the hypervisor. It is described as a permanent DoS caused by a NULL pointer dereference when an untrusted VM lacking PSCI support issues a PSCI call, leading to hypervisor disruption (availability impact High). Reported in Qual...

OESA-2022-2016 hadoop security update

Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fixes: In Apache...

CVE-2021-33036

A flaw was found in Hadoop Yarn. This flaw allows an attacker to benefit from permissions, escalate to a yarn user and run arbitrary commands as root...

CVE-2022-33036

creationtimestamp| type| source ---|---|--- 2022-06-29 17:23:22+00:00| seen| https://t.me/cibsecurity/45356...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33036

A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-33036

CVE-2022-33036 concerns a binary hijack in Embarcadero Dev-CPP v6.3 that enables arbitrary code execution via a crafted .exe file. The effect is tied to a local attack vector with user interaction required, as documented by NVD and corroborated by Red Hat and OSV/CVE records. The root cause descr...

ch.cern.hadoop:hadoop-archive-logs (=3.2.1), ch.cern.hadoop:hadoop-datajoin (=3.2.1) +250 more potentially affected by CVE-2021-33036 via org.apache.hadoop:hadoop-yarn-server-common (>=3.0.0 <=3.2.2)

org.apache.hadoop:hadoop-yarn-server-common MAVEN version =3.0.0, =3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-yarn-server-common and may be impacted: - ch.cern.hadoop:hadoop-archive-logs =3.2.1 -...