272 matches found
CVE-2026-56389
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...
CVE-2026-56389
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...
CVE-2026-56389
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...
Linux Distros Unpatched Vulnerability : CVE-2026-56389
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A...
PT-2026-65777
Name of the Vulnerable Software and Affected Versions GNU Bison version 3.8.2 Description Improper handling of grammar-defined configuration variables allows the execution of an arbitrary program during HTML report generation. A grammar file can override the executable used for the XML-to-HTML...
CVE-2026-56390: External Control of File Name or Path
GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...
CVE-2026-56389: Improper Neutralization of Special Elements used in an OS Command
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...
PT-2026-65778
Name of the Vulnerable Software and Affected Versions GNU Bison version 3.8.2 Description GNU Bison improperly handles grammar-defined output paths. Grammar directives such as %output and %header allow specifying file paths that are accepted without restriction and override caller-supplied output...
Linux Distros Unpatched Vulnerability : CVE-2026-56390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Bison improperly handles grammardefined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without...
JLSEC-2026-117
GNU Bison before 3.5.4 allows attackers to cause a denial of service application crash. NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash...
PT-2026-35191
GNU Bison before 3.5.4 allows attackers to cause a denial of service application crash. NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash...
EUVD-2025-117104
Malicious code in selected-scarlet-bison npm...
Malicious code in particular-amethyst-bison (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32425cce44cc8ff232965905d82eddec12403be80b8d811019ff6b7ac5bb65bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117199
Malicious code in nutty-emerald-bison npm...
EUVD-2025-117173
Malicious code in particular-amethyst-bison npm...
EUVD-2025-117110
Malicious code in scientific-crimson-bison npm...
EUVD-2025-98252
Malicious code in harshbisonz3n npm...
EUVD-2025-101963
Malicious code in sympatheticbisonz3n npm...