ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19692 more potentially affected by CVE-2026-58063 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.4.0, =0.4.0, =0.4.0, =0.8.1, =0.31.0, =0.5.0, =0.6.0, =0.5.0, =0.6.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-58063 Source advisory: MEND:CVE-2026-58063...

CVE-2026-59647 CRMF/CMP password-MAC honours unbounded iteration count

In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...

.NET Framework Insufficient Data Authenticity Verification

Vulnerabilities of .NET software platforms and the Microsoft .NET Framework are related to insufficient validation of data authenticity. Exploitation of these vulnerabilities can allow attackers to bypass existing security mechanisms remotely...

dedoc/scramble Package Code Execution

The vulnerability of the dedoc/scramble package for the Laravel PHP framework is related to incorrect code generation practices. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

.NET DoS

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

PT-2026-67541

Name of the Vulnerable Software and Affected Versions fprime framework version 4.2.2 Description An integer overflow occurs in the Svc::FileDownlink::SendPartial component, which can be triggered by a crafted input to cause a Denial of Service DoS. An integer overflow is a condition where an...

CVE-2026-67976

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

EUVD-2026-52479

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

CVE-2026-67976: Uncontrolled Resource Consumption

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

PT-2026-67439

OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scopes by supplying a self-generated RSA keypair via the jwks field. Once an...

CVE-2026-67976

The fprime framework version v4.2.2 contains a vulnerability in the Ref::SignalGen component. The software fails to validate the safety of user-controlled parameters , which allows an attacker to trigger a Denial of Service (DoS) by providing unsafe inputs. No specific exploit details, remediatio...

CVE-2026-67977: Uncontrolled Resource Consumption

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-67519

Name of the Vulnerable Software and Affected Versions fprime framework version 4.2.2 Description The Ref::SignalGen component fails to validate the safety of user-controlled parameters. This lack of validation allows an attacker to trigger a Denial of Service DoS, a condition where the system...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-67976

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

CVE-2026-67977

The fprime framework version v4.2.2 is vulnerable to an integer overflow within the Svc::FileDownlink::SendPartial component. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . While the vulnerability is confirmed across multiple sources, the provided...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-67976

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

CVE-2026-67977

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-67521

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.3 Description An out-of-bounds heap read can occur in the C response parser when constructing an error message for a malformed response. This happens in the aiohttp/ http parser.pyx file, where an llhttp...