23 matches found
CVE-2026-84445 affecting package azurelinux-image-tools for versions less than 1.6.0-3
CVE-2026-84445 affecting package azurelinux-image-tools for versions less than 1.6.0-3. An upgraded version of the package is available that resolves this issue...
CVE-2026-84304 affecting package azurelinux-image-tools for versions less than 1.6.0-3
CVE-2026-84304 affecting package azurelinux-image-tools for versions less than 1.6.0-3. An upgraded version of the package is available that resolves this issue...
CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2
CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2. A patched version of the package is available...
AZL-93111 CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2
CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2. A patched version of the package is available...
CVE-2026-39824 affecting package azurelinux-image-tools for versions less than 1.4.0-1
CVE-2026-39824 affecting package azurelinux-image-tools for versions less than 1.4.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.3.0-2
CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.3.0-2. A patched version of the package is available...
AZL-87387 CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.4.0-2
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...
CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1
CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1
CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...
AZL-86430 CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...
OpenClaw 安全漏洞
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.2 contained security vulnerabilities. These vulnerabilities stemmed from the image tools not adhering to the “tools.fs.workspaceOnly” restriction, which could allow attackers to...
AZL-82115 CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each header field-value independently and aggregates members across values. This allows an attacker to amplify cpu and allocations by sending many baggage: header lines...
CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2
CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2. A patched version of the package is available...
CVE-2026-25884
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8...
AZL-78680 CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2
Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic...
CVE-2018-16980
dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/imagetools/index.jsp fieldName and inode parameters...
Bug in Google Markup, Windows Photo-Cropping Tools Exposes Removed Image Data
Image-editing tools from Google and Microsoft contain the “aCropalypse” bug, which can reveal information users intentionally removed...
dotCMS cross-site scripting vulnerability (CNVD-2019-07129)
dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . The 'fieldName' and 'inode' parameters in the /html/portlet/ext/contentlet/imagetools/index.jsp page in dotCMS...