PT-2026-95135

Name of the Vulnerable Software and Affected Versions JabRef versions prior to 6.0-alpha.6 Description JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. When the built-in HTTP server or jabsrv is enabled, the 'GET /better-bibtex/cayw' endpoint accepts an external command...

PT-2026-94760

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvmet execute get log page rmi function where the status variable retains a success value NVME SC SUCCESS even when kzalloc fails to allocate the log buffer. This...

PT-2026-94552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free error exists in the ocfs2 module of the Linux kernel. The issue occurs when a corrupted append-DIO dinode contains an i dio orphaned slot value that falls outside the...

PT-2026-94740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists when reading bpf link information. In the functions bpf link show fdinfo and bpf link get info by fd, the link-prog variable is accessed without proper...

PT-2026-94817

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA core component. When accessing a counter through the netlink path, the synchronization relies on rdma restrack get. Because rdma restrack del is...

PT-2026-94819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA core component. When accessing a Completion Queue CQ via the netlink path, the synchronization relies on rdma restrack get. Because rdma restrac...

PT-2026-94820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA core component. When querying a Queue Pair QP via the netlink flow, the synchronization relies on rdma restrack get. However, during the QP...

PT-2026-94831

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/nldev component where the nested attribute RDMA NLDEV ATTR STAT HWCOUNTERS is not properly validated. The top-level policy only validates the container and...

PT-2026-94844

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access in the property array occurs when the software node get reference args function is called with an index of UINT MAX representing -1, as the bounds check fails to...

PT-2026-94855

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory reclaim deadlock can occur in the TX EQTR context of the UFS core. This happens when TX EQTR runs while devfreq gear scaling has quiesced the UFS tagset. In this state, the...

PT-2026-94875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cxl get feature function where it reads a feature in a loop using a fixed size out as the output capacity for every iteration. During the final partial iteration,...

PT-2026-94892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where Get or Set Feature payloads exceeding the mailbox payload size are split into multiple mailbox commands. Because the mbox mutex only serializes individual commands...

PT-2026-94934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bpf get btf vmlinux function during the lazy parsing of vmlinux BTF BPF Type Format. The function publishes the result using a plain store and re-checks it...

CVE-2026-61596

djust , a Django library providing Phoenix LiveView-style reactive server-side rendering with Rust-powered performance, had a broken object-level access control (IDOR) flaw prior to version 1.0.7 . Per-object authorization (get_object + has_object_permission) was enforced on WebSocket mount and e...

CVE-2026-61596 djust has broken object-level access control (IDOR)

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry...

CVE-2026-63325

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325

@redocly/respect-core and @redocly/cli (Redocly CLI) before version 2.33.0 contain an arbitrary code execution vulnerability in the respect command. The root cause is dynamic evaluation of $faker runtime expressions in Arazzo descriptions: a crafted expression can traverse constructor , prototype...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...