CVE-2025-48976_CVE-2025-48988

CVE-2025-48976CVE-2025-48988 POC...

Fedora 44 : nextcloud (2026-362f1943c8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-362f1943c8 advisory. 34.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 45 : nextcloud (2026-5c1bbb46c3)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5c1bbb46c3 advisory. 34.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 43 : nextcloud (2026-c495e95154)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c495e95154 advisory. 34.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

ROOT-APP-MAVEN-CVE-2025-48988 CVE-2025-48988 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-48988 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

Photon OS 5.0: Apache PHSA-2025-5.0-91-0537

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0537. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ROOT-APP-NPM-CVE-2026-48988 CVE-2026-48988 in @rootio/markdown-it - Patched by Root

Root has patched CVE-2026-48988 in the @rootio/markdown-it package for Root:npm. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-48988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic On^2...

CVE-2026-48988

markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic On^2 processing in the smartquotes rule. The issue stems from repeatedly modifying strings with replaceAt, which performs On slicing and...

UBUNTU-CVE-2026-48988

markdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic On^2 processing in the smartquotes rule. The issue stems from repeatedly modifying strings with replaceAt, which performs On slicing and...

CVE-2026-48988 vulnerabilities

Vulnerabilities for packages: vitess, gitlab-rails-ce, gitlab-rails-ce-fips, renovate, kibana, semaphore...

CVE-2026-48988 vulnerabilities

Vulnerabilities for packages: renovate, vitess...

@0xwork/connect (>=0.1.0, <=0.1.8), @7n/rules (>=1.0.0, <=1.118.11) +444 more potentially affected by CVE-2026-48988 via markdown-it (>=14.0.0, <=14.1.1)

markdown-it NPM version =14.0.0, =0.1.0, =1.0.0, =4.10.0, =2026.4.23-zh, =2.3.0, =1.0.0, =0.25.7, =0.12.2, =3.0.0, =1.6.8, =0.1.1, =0.1.1, =8.1.3, =8.4.0 and more Source cves: CVE-2026-48988 Source advisory: OSV:GHSA-6V5V-WF23-FMFQ...

@0xwork/connect (>=0.1.0, <=0.1.8), @7n/rules (>=1.0.0, <=1.118.11) +444 more potentially affected by CVE-2026-48988 via markdown-it (>=14.0.0, <=14.1.1)

markdown-it NPM version =14.0.0, =0.1.0, =1.0.0, =4.10.0, =2026.4.23-zh, =2.3.0, =1.0.0, =0.25.7, =0.12.2, =3.0.0, =1.6.8, =0.1.1, =0.1.1, =8.1.3, =8.4.0 and more Source cves: CVE-2026-48988 Source advisory: SNYK:JS-MARKDOWNIT-17353909...

CVE-2026-48988

creationtimestamp| type| source ---|---|--- 2026-05-23 23:47:27+00:00| published-proof-of-concept| https://github.com/markdown-it/markdown-it/security/advisories/GHSA-6v5v-wf23-fmfq 2026-06-17 22:39:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojeymb5ll2z...

MiracleLinux 9 : tomcat-9.0.87-3.el9_6.3 (AXSA:2025-10779:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10779:06 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-4912...

TencentOS Server 4: tomcat (TSSA-2025:0623)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0623 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Oracle Siebel Server is prior to 25.10 (October 2025 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through...

TencentOS Server 3: tomcat (TSSA-2025:0797)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0797 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities

Summary QRadar Suite Software includes components with known vulnerabilities. These have been addressed in the update. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons...