CVE-2026-54545: Improper Limitation of a Pathname to a Restricted Directory

wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlled module filenames only once before writing extracted modules, so a crafted filename containing overlapping traversal sequences such as ....// collapses to ../ after sanitizatio...

The vulnerability of the `sndctl LedSysfs_Add()` function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, allows a hacker to cause a service failure.

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...