CVE-2026-51298

Summary of findings (CVE-2026-51298) : Several connected advisories confirm a use-after-free vulnerability in SQLite 3.41 related to the JSON extraction function. The flaw occurs when, after releasing the JsonParse object with jsonParseFree(), the code still accesses internal members of the freed...

sqlite: SQLite: Denial of Service via use-after-free in JSON extraction

A flaw was found in SQLite. A remote attacker could exploit a use-after-free vulnerability in the JSON extraction function. This occurs when the program attempts to access memory after it has been freed, specifically within the JsonParse object. Successful exploitation of this vulnerability can...

CVE-2026-64296 exfat: bound uniname advance in exfat_find_dir_entry()

In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfatfinddirentry In exfatfinddirentry, each TYPEEXTEND file name entry advances the output pointer by a fixed amount while the loop guard only tracks the accumulated name length: if ++order == 2...

GO-2026-5880 Hardlink path traversal during tar extraction in oras.land/oras-go

Hardlink path traversal during tar extraction in oras.land/oras-go...

GO-2026-5435 Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm

Helm Chart extraction output directory collapse via Chart.yaml name dot-segment in helm.sh/helm...

CVE-2026-65707

Likeshop 3.0.5 is affected by an authenticated SQL injection in the adjustAccount endpoint. The UserLogic.php adjustAccount function concatenates money, integral, growth, and earnings directly into Db::raw() fragments without type casting, validation, or parameter binding, enabling an admin-level...

CVE-2026-65707 Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint

Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral,...

CVE-2026-54422

CVE-2026-54422 affects OpenStack Ironic Python Agent up to and including 11.5.0. A malicious boot container deployed via ironic-python-agent can extract the credentials used to download it, enabling credential disclosure on a local attacker. The CVSS metrics indicate a LOCAL attack vector with HI...

PT-2026-64374

Name of the Vulnerable Software and Affected Versions Likeshop versions prior to 3.0.6 Description Authenticated users with admin-level privileges can extract arbitrary database contents, including credentials, personally identifiable information PII, and session tokens. This occurs because the...

GHSA-5XF7-4P34-54QR pypdf: Possible infinite loop for not terminated inline images

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. Patches This has been fixed in pypdf==6.14.1. Workarounds If yo...

EUVD-2026-42366

pypdf: Possible infinite loop for not terminated inline images...

pypdf: Possible infinite loop for not terminated inline images

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. Patches This has been fixed in pypdf==6.14.1. Workarounds If yo...

CVE-2026-65431

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...

CVE-2026-65431

The CVE describes a ZIP slip in the Joomla GeoIP extension by regularlabs.com. The root cause is that GeoIP database update archives are extracted without path validation, enabling unsafe file extractions. Affected product: Joomla Extension (GeoIP) from regularlabs.com. Documented impact is high ...

EUVD-2026-47917

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...

CVE-2026-65431 Joomla Extension - regularlabs.com - Zipslip in GeoIP extension

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...

CVE-2026-65431

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...

EUVD-2026-47922

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

EUVD-2026-42357

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction...

USN-8477-3: tar regression

USN-8477-1 fixed a vulnerability in tar. That fix was incomplete and could cause tar to fail to extract old archives that recorded a nonzero size for directory entries, resulting in a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was...