CVE-2026-74685 hwmon: (ltc4282) Clamp negative current limits

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Clamp negative current limits When a negative value is passed to ltc4282writecurr, the signed long val is cast directly to u64: drivers/hwmon/ltc4282.c:ltc4282writecurr / need to pass it in millivolt / u32 in =...

CVE-2026-74685

CVE-2026-74685 affects the Linux kernel hardware monitoring driver for the LTC4282 (drivers/hwmon/ltc4282.c). The root cause is an integer sign-extension flaw in ltc4282_write_curr(): a negative long value is cast directly to u64, converting it into a large positive number. The subsequent arithme...

SUSE CVE-2026-68289

In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipcrecvmsg and tipcrecvstream In tipcrecvmsg, the copy length is computed as: copy = mintint, dlen - offset, buflen; buflen is sizet but mintint, ... casts it to int. When buflen exceeds INTMAX e.g...

PT-2026-79690

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ltc4282 write curr function within the hwmon module. When a negative value is provided to the val variable, it is cast directly to an unsigned 64-bit integer u64,...

Exploit for SQL Injection in Sequelizejs Sequelize

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026...

django-cast (0.2.33) potentially affected by unknown CVE via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: unknown CVE Source advisory: OSV:GHSA-JM5P-837G-RV8G...

django-cast (0.2.33) potentially affected by unknown CVE via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: unknown CVE Source advisory: OSV:GHSA-X5CX-W6P2-MXF2...

django-cast (0.2.33) potentially affected by unknown CVE via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: unknown CVE Source advisory: OSV:GHSA-C2XX-CJMH-9Q8F...

django-cast (0.2.33) potentially affected by unknown CVE via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: unknown CVE Source advisory: OSV:GHSA-92HV-J533-69WC...

django-cast (0.2.33) potentially affected by CVE-2026-55468 via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: CVE-2026-55468 Source advisory: OSV:GHSA-3VRH-M9W7-V94F...

django-cast (0.2.33) potentially affected by CVE-2026-54262 via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: CVE-2026-54262 Source advisory: OSV:GHSA-8634-MR4J-R72C...

django-cast (0.2.33) potentially affected by CVE-2026-54261 via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: CVE-2026-54261 Source advisory: OSV:GHSA-R6P4-GRQ7-XM4M...

django-cast (0.2.33) potentially affected by CVE-2026-54260 via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: CVE-2026-54260 Source advisory: OSV:GHSA-F2P5-J6FG-5CXF...

django-cast (0.2.33) potentially affected by CVE-2026-54259 via wagtail (6.1.0rc2)

wagtail PYPI version 6.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - django-cast 0.2.33 Source cves: CVE-2026-54259 Source advisory: OSV:GHSA-H54R-XQ46-QWQM...

hobbes:fuzz-type-decode: Bad-cast to hobbes::Primitive from hobbes::Switch in std::_Rb_tree<std::shared_ptr<hobbes::Primitive>, std::shared_ptr<hobbes::Primit

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=6297348518248448 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-type-decode Job Type: libfuzzerubsanhobbes Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5c819dfe81e0 Cra...

CVE-2026-72068

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On 32-bit kernels both rlimnew unsigned long and NSECPERSEC 1000000000L...

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

DEBIAN-CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

UBUNTU-CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...