Security update for go1.26

This update for go1.26 fixes the following issues Update to go1.26.4 bsc1255111: CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. CVE-2026-42507: net/textproto: arbitrary input are includ...

SUSE-SU-2026:2327-1 Security update for go1.26

This update for go1.26 fixes the following issues Update to go1.26.4 bsc1255111: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-42504)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-42504 advisory. - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume...

CLEANSTART-2026-BP69037 Security fixes for CVE-2026-27145, CVE-2026-39824, CVE-2026-42504, CVE-2026-42507 applied in versions: 1.0.10-r4, 1.0.10-r5

Multiple security vulnerabilities affect the wait-for-port package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HD10763 Security fixes for CVE-2026-25680, CVE-2026-39821, CVE-2026-42504, CVE-2026-42507 applied in versions: 1.18.1-r0

Multiple security vulnerabilities affect the kyverno package. These issues are resolved in later releases. See references for individual vulnerability details...

BELL-CVE-2026-42504

Bulletin has no description...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: kots, cloud-provider-azure, ingress-nginx-controller, net-kourier, aws-efs-csi-driver, crossplane-provider-family-azure, rancher-helm, gitlab-runner, k9s, cass-operator, emissary, kubescape, argocd-image-updater, mattermost, dynamic-localpv-provisioner, cluster-api,...

CVE-2026-42504

creationtimestamp| type| source ---|---|--- 2026-06-03 02:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mne3ga4eue23 2026-06-03 12:01:07+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2rgkfkm2f 2026-06-04 06:00:20+00:00| seen|...

CVE-2026-42504 Quadratic complexity in WordDecoder.DecodeHeader in mime

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CVE-2022-42504

In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-42504

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0...

CVE-2024-42504

creationtimestamp| type| source ---|---|--- 2024-10-03 09:55:31+00:00| seen| https://t.me/cvedetector/6891...

CVE-2023-42504

creationtimestamp| type| source ---|---|--- 2023-12-20 07:32:30+00:00| seen| https://t.me/ctinow/156784...

CVE-2023-42504

CVE-2023-42504 describes a denial-of-service vulnerability in Apache Superset prior to 3.0.0 where an authenticated attacker can initiate multiple concurrent dashboard exports, potentially exhausting resources. Multiple connected sources (OSV, Red Hat, CNVD, GHSA advisories, etc.) corroborate a r...

CVE-2023-42504 Apache Superset: Lack of rate limiting allows for possible denial of service

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0...

CVE-2023-42504 Apache Superset: Lack of rate limiting allows for possible denial of service

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0...

CVE-2022-42504

creationtimestamp| type| source ---|---|--- 2022-12-16 18:24:29+00:00| seen| https://t.me/cibsecurity/54673...

CVE-2022-42504

In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-42504

CVE-2022-42504 affects the Android kernel component CallDialReqData::encodeCallNumber (callreqdata.cpp). It describes an out-of-bounds write caused by an incorrect bounds check, enabling local escalation of privilege with System execution privileges required. Exploitation is not dependent on user...