253044 matches found
CVE-2026-98670
A flaw was found in the Linux kernel's Xilinx XADC driver. During device unbinding, an improper cleanup order allows interrupt requests IRQs to remain active after delayed work has been cancelled. A local user capable of detaching the device can cause an interrupt to schedule work that executes...
cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...
cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...
cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...
CVE-2026-102829
A flaw was found in simple-git. The software fails to include the VISUAL environment variable in its unsafe editor detection checks. If a consuming application accepts untrusted environment variables, an attacker can specify a malicious program that Git launches during interactive operations,...
cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy
A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...
[SECURITY] [DSA 6574-1] php8.4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6574-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2026 https://www.debian.org/security/faq -...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview kjdev/brotli is an A compression/decompression with Brotli Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute...