rabbitmq-server: rabbitmq-server: Denial of Service via unbounded regular expression evaluation in JMS topic exchange

A flaw was found in rabbitmq-server. An authenticated user with permissions to bind and publish messages can cause a Denial of Service DoS by submitting specially crafted pattern-matching expressions to the Java Message Service JMS topic exchange plugin. Because the message broker evaluates these...

RLSA-2026:67156 Moderate: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

perl security update

An update is available for perl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Perl is a high-level programming language that is commonly used for system...

EUVD-2026-78168

Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with that are stored and later evaluated in the full Spring context when a mail task uses variable-backed...

CVE-2026-92114: Inefficient Regular Expression Complexity

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/webcore/src/v09/basiccatalog/functions/saferegex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be...

CVE-2026-76821: Uncontrolled Resource Consumption

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

MiracleLinux 8 : perl-5.26.3-423.el8_10.1 (AXSA:2026-1831:24)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1831:24 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block direct...

RockyLinux 8 : perl (RLSA-2026:67162)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67162 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly...

AlmaLinux 8 : perl (ALSA-2026:67162)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67162 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly fr...

AlmaLinux 9 : perl (ALSA-2026:67155)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67155 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly fr...

AlmaLinux 8 : perl:5.32 (ALSA-2026:67278)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67278 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly fr...

AlmaLinux 10 : perl (ALSA-2026:67156)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67156 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly...

CVE-2026-91145

Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with that are stored and later evaluated in the full Spring context when a mail task uses variable-backed...

CVE-2026-91145 Activiti through 7.1.0.M6 Expression Injection via Mail Task

Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with that are stored and later evaluated in the full Spring context when a mail task uses variable-backed...

CVE-2026-91145

Activiti through 7.1.0.M6 contains an expression injection vulnerability in its mail task handling. The root cause is a failure to validate hash-brace (#{}) deferred expressions in process variables, allowing an attacker to bypass expression filtering. Injected expressions are stored and later ev...

CVE-2026-91145

Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with that are stored and later evaluated in the full Spring context when a mail task uses variable-backed...

CVE-2026-91145 Activiti through 7.1.0.M6 Expression Injection via Mail Task

Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with that are stored and later evaluated in the full Spring context when a mail task uses variable-backed...

CVE-2026-91145 Activiti through 7.1.0.M6 Expression Injection via Mail Task

Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with that are stored and later evaluated in the full Spring context when a mail task uses variable-backed...

UBUNTU-CVE-2026-55244

ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROMPY in asteval/astutils.py exposes BaseException, SystemExit, KeyboardInterrupt, and GeneratorExit to expressions evaluated by asteval.Interpreter.eval, while run and eval in asteval/asteval.py catch Exception rather...

CVE-2026-55244

ASTEVAL (a Python expression evaluator) prior to 1.0.9 has a sandbox escape via BaseException subclasses . The FROM_PY symbol table in astutils.py exposes SystemExit, KeyboardInterrupt, GeneratorExit, and BaseException to sandboxed expressions, while run() and eval() in asteval.py only catch Exce...