a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-49460 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +9 more potentially affected by CVE-2026-48735 via pypdf (3.17.1)

pypdf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - a-data-processing 0.0.1 - ab-data-processing 0.0.1 - arac 0.0.1 - crate-anon 0.20.7 - generalagent =0.0.6, =0.0.1, =0.1.0, =0.0.1, =0.0.14 - pyxreade...

Google Chrome Video Component Buffer Overflow Vulnerability (CNVD-2026-25118)

Google Chrome Video is a component that handles video decoding and rendering, primarily used to support video playback in the Chrome browser on ChromeOS. The Google Chrome Video component has a security vulnerability. This vulnerability stems from an improper check of boundaries during video data...

SUSE-SU-2026:22132-1 Security update for openssl-3

This update for openssl-3 fixes the following issues - CVE-2024-41996: DHEATATTACK: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers to trigger expensive server-side DHE bsc1230698. - CVE-2026-7383:...

openDCIM SQL Injection Code Execution

The vulnerability of the openDCIM software for managing data infrastructure is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-40930

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

0x20bf (0.0.1), 2keys (0.5.1) +3453 more potentially affected by CVE-2026-34993 via aiohttp (>=3.0.0b0, <=3.13.5)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-34993 Source advisory: GHSA-JG22-MG44-37J8...

0x20bf (0.0.1), 2keys (0.5.1) +3453 more potentially affected by CVE-2026-34993 via aiohttp (>=3.0.0b0, <=3.13.5)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.0.15, =0.1.0, =0.5.0a0, =3.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.1.9 and more Source cves: CVE-2026-34993 Source advisory: OSV:GHSA-JG22-MG44-37J8...

Moderate: compat-openssl11 security update

The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fixes: openssl: OpenSSL: Denial of Service due to NULL pointer...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the decoding process. An attacker can cause application crashes or bypass memory allocation limits by supplying specially crafted Avro data that exploits integer arithmetic errors during decoding...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +637 more potentially affected by CVE-2026-48156 via pypdf (>=3.1.0, <=6.11.0)

pypdf PYPI version =3.1.0, =0.1.1, =0.9.1, =0.0.2, =0.0.1, =0.1.0, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.0.1, =0.1.0 and more Source cves: CVE-2026-48156 Source advisory: MEND:CVE-2026-48156...

CVE-2026-44483 RVF: Prototype pollution in @rvf/set-get reachable via @rvf/core preprocessFormData (HTTP form data)

RVF formerly Remix Validated Form provides easy form validation and state management for React. From 6.0.0 to before 6.0.4 and 7.0.2, setPath in @rvf/set-get used by @rvf/core to flatten incoming form data into a nested object does not block the keys proto, constructor, or prototype when walking ...

aiohttp HTTP Client DoS

The vulnerability of the aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

cisco-hypershield

Ansible Collection: stevefulme1.ciscohypershield Ansible Col...

PT-2026-40525

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

Zebra security vulnerabilities

Zebra is an open-source Zcash implementation built using Rust by the Zcash Foundation. Versions of Zebra prior to 4.4.0 contained security vulnerabilities. These vulnerabilities stemmed from excessive buffer sizes allocated for multiple inbound deserialization paths, which could allow attackers t...

CVE-2026-43114

A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...

EUVD-2026-27231

A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notificatio...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the unmaphugepagerange function in the mm/hugetlb.c file, belonging to the memory management subsystem of the Linux kernel, is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Ext4 Heap Buffer Overflow DoS

The vulnerability of the ext4diowriteiter function in the fs/ext4/file.c file of the Ext4 file system in the Linux operating system is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...