CVE-2026-33481

Syft is a a CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When scanning archives Syft will unpack those...

CVE-2026-33481 Syft improper temporary file cleanup

Syft is a a CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When scanning archives Syft will unpack those...

CVE-2026-33481 Syft improper temporary file cleanup

Syft is a a CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When scanning archives Syft will unpack those...

CVE-2026-33481 Syft improper temporary file cleanup

Syft is a a CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When scanning archives Syft will unpack those...

CVE-2026-33481

Technical details about CVE-2026-33481 are not publicly provided in the connected documents. Monitor for updates; no affected products, versions, vectors, or remediation details are specified in the supplied materials.

CVE-2026-32314

Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. Prior to 0.13.10, the Rust implementation of Yamux can panic when processing a crafted inbound Data frame that sets SYN and uses a body length greater than DEFAULTCREDIT e.g. 262145. On the first packet of a new...

CVE-2026-31886

Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the inline DAG execution endpoints is passed directly into filepath.Join to construct a temporary directory path without any format validation. Go's filepath.Join resolves...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in HTTP/2 servers that triggers when a client sends WINDOWUPDATE frames on stream 0 that cause the flow control window to exceed $2^31-1$. Although the server responds with a GOAWAY...

drivers/watchdog/rzg2l_wdt.c Watchdog Timer

The vulnerability of the rzg2lwdtprobe function in the drivers/watchdog/rzg2lwdt.c module related to Linux kernel watchdog timer support is associated with improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux block-level kernel Heap Buffer Overflow DoS

The vulnerability of the blkcgiolatencythrottle function in the block/blk-iolatency.c module, which supports the block-level kernel in Linux operating systems, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Solarflare Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the efxef10tryupdatenicstatsvf function in the drivers/net/ethernet/sfc/ef10.c file of the Solarflare Linux kernel-based network adapter driver is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

panfrost_ioctl_madvise Use-After-Free

The vulnerability of the panfrostioctlmadvise function in the drivers/gpu/drm/panfrost/panfrostdrv.c driver module related to the Linux kernel’s Direct Rendering Infrastructure DRI support mechanism is associated with improper cleaning or release of resources. Exploiting this vulnerability could...

Linux kernel RCU Heap Buffer Overflow DoS

The vulnerability of the rcuscalecleanup function in the kernel/rcu/rcuscale.c module of the synchronization subsystem in Linux multi-threaded kernel systems is related to the execution of operations outside of memory buffers. Exploiting this vulnerability can allow an attacker to cause a service...

Pinchtab resource management error vulnerability

Pinchtab is an open-source AI-powered browser control tool developed by Pinchtab. Version 0.8.4 of Pinchtab contains a resource management vulnerability, which stems from command injection in Windows cleanup paths, potentially allowing arbitrary PowerShell commands to be executed...

CVE-2026-33481: Improper Cleanup on Thrown Exception

Syft is a a CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When scanning archives Syft will unpack those...

CVE-2026-33623: Improper Neutralization of Special Elements used in an OS Command

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.4 contains a Windows-only command injection issue in the orphaned Chrome cleanup path. When an instance is stopped, the Windows cleanup routine builds a PowerShell -Command string using a...

Discourse cross-site scripting vulnerability (CNVD-2026-17264)

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from a cross-site scripting vulnerability that stems from the onebox method in the SharedAiConversation model rendering...

Linux kernel BPF Heap Buffer Overflow DoS

The vulnerability of the cpumapringcleanup function in the kernel/bpf/cpumap.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect code validation for function return operations. Exploiting this vulnerability could allow an attacker to trigger a service...

mtk_disp_drv Direct Rendering Failure

The vulnerability of the mtkovllayeroff function in the drivers/gpu/drm/mediatek/mtkdispdrv.h file, a driver for supporting Direct Rendering Infrastructure DRI in Mediatek graphics cards, related to Linux operating systems, stems from improper resource cleanup or release. Exploiting this...

PT-2026-28563

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.7.0 Description A deadlock in the AMF's SCTP notification handler can cause the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 interface can cause Ella Core to...