CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete in restframework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, so Django issues a deletion query that matches no row and repor...

CVE-2026-114137

Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete in restframework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, so Django issues a deletion query that matches no row and repor...

CVE-2026-114050

A flaw was found in vLLM. An unauthenticated remote attacker can cause a Denial of Service DoS by sending crafted multimodal requests with manipulated identifiers to desynchronize internal processor caches. This desynchronization causes an unhandled token mismatch error in the engine core,...

CVE-2026-78116 Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In datareadyworkhandler drivers/sensor/broadcom/afbrs50/afbrs50.c, a non-STATUSOK return from ArgusEvaluateData calls handleerroronresult, which finalises the request with...

CVE-2026-78116 Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In datareadyworkhandler drivers/sensor/broadcom/afbrs50/afbrs50.c, a non-STATUSOK return from ArgusEvaluateData calls handleerroronresult, which finalises the request with...

CVE-2026-78116 Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path

The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In datareadyworkhandler drivers/sensor/broadcom/afbrs50/afbrs50.c, a non-STATUSOK return from ArgusEvaluateData calls handleerroronresult, which finalises the request with...

CVE-2026-78116

The Broadcom AFBR-S50 time-of-flight sensor driver contains a double-free vulnerability in the data_ready_work_handler() function (located in drivers/sensor/broadcom/afbr_s50/afbr_s50.c). When Argus_EvaluateData() returns a non-STATUS_OK value, the code calls handle_error_on_result(), which final...

Origin Validation Error

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via ElectronHidDelegate and ElectronUsbDelegate, which performed HID and USB permission checks with...

Origin Validation Error

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via ElectronHidDelegate and ElectronUsbDelegate, which performed HID and USB...

SUSE CVE-2026-98842

In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetagloadmodule If codetagloadmodule fails, err is not set to reflect the failure and loadmodule returns 0 after the module has been torn down. Also, if the module is a livepatch, mod-klpinfo...

CLSA-2026-1792599451 Fix CVE(s): CVE-2026-109618, CVE-2026-109619

SECURITY UPDATE: code execution via state corruption after an out-of-memory error and via stale global state - debian/patches/CVE-2026-109618.patch: terminate the process on memory limit and allocation overflow errors instead of unwinding, clear request globals at shutdown, disable session upload...

SUSE CVE-2026-113239

Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CLSA-2026-1792599426 Fix CVE(s): CVE-2026-109618, CVE-2026-109619

SECURITY UPDATE: code execution via state corruption after an out-of-memory error and via stale global state - debian/patches/CVE-2026-109618.patch: terminate the process on memory limit and allocation overflow errors instead of unwinding, clear request globals at shutdown, disable session upload...

Silicon Labs EmberZNet resource management error vulnerability

Silicon Labs EmberZNet versions 9.1.1 and earlier contain a resource management error vulnerability. This vulnerability arises when processing a malformed Publish Billing Period command, leading to recursive function calls that fail to reach termination conditions. It affects only devices that...

Drupal Commerce Decoupled Checkout input validation error vulnerability

Drupal Commerce Decoupled Checkout versions 1.0.0 through 1.8.0 contain an input validation error vulnerability. This vulnerability stems from improper control over modifications to dynamic object properties, potentially leading to object injection...

Silicon Labs EmberZNet buffer error vulnerability

Silicon Labs EmberZNet versions 9.1.1 and earlier contain a buffer error vulnerability. This vulnerability arises from an out-of-bounds write when processing malformed SimpleDescreq responses received from network devices, potentially leading to remote code execution...

GraphQL Python GraphQL-core 3 resource management error vulnerability

In GraphQL Python, there is a resource management error vulnerability in versions 3.2.3 through 3.2.12 and 3.3.0a3 through 3.3.0rc1. This vulnerability arises because the parser’s maxtokens limit only counts non-comment tokens; however, comments that are skipped are still assigned as Tokens via...

GitLab input validation error vulnerability

A input validation error vulnerability exists in GitLab CE/EE versions from 18.3 up to and including 19.3.6, from 19.4 up to and including 19.4.3, and from 19.5 up to and including 19.5.1. This vulnerability stems from improper trust of user-supplied values when constructing endpoint URLs within...

Drupal Webform resource management error vulnerability

Drupal Webform versions 0.0.0 through 6.2.12 and 6.3.0 through 6.3.1 contain a resource management error vulnerability stemming from improper interaction frequency control, which may lead to functional abuse...

Silicon Labs EmberZNet resource management error vulnerability

Silicon Labs EmberZNet versions 9.1.1 and earlier contain a resource management error vulnerability. This vulnerability arises because malformed Discover Attributes commands can lead to loops with an unreachable exit condition; such commands must originate from devices on the network, and they...