Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the integer parsing logic in lib/parser.js and src/toml.pegjs, where BigInt conversion of oversized integer literals exhibits super-linear CPU growth relative to digit count. An...

SUSE CVE-2026-98731

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix plen overflow in btintelpcierecvframe plen is u16 and computed as HDRSIZE + dlen. For ACL/ISO frames dlen is a 16-bit field, so a value = 0xFFFC wraps the sum, bypassing the "skb-len plen" check and...

SUSE CVE-2026-98801

In the Linux kernel, the following vulnerability has been resolved: net: restrict SORESERVEMEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 "net: add new socket option SORESERVEMEM" and commit d00c8ee31729 "net: fix possible NULL deref in sockreservememory" only checked skhasaccountsk,...

Exploit for CVE-2026-110264

gitlab-onigmo-check !statushttps://img.shields.io/badge/st...

EUVD-2026-107562

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise...

expat: expat: Denial of Service via integer overflow in expat_realloc

A flaw was found in expat. On 32-bit systems, an integer overflow occurs within the expatrealloc memory allocation function when calculating buffer sizes. A remote attacker can exploit this vulnerability by supplying specially crafted XML input to an application that processes data with the...

Important: Red Hat Security Advisory: expat security update

An update for expat is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

expat: expat: Denial of Service via integer overflow in expat_realloc

A flaw was found in expat. On 32-bit systems, an integer overflow occurs within the expatrealloc memory allocation function when calculating buffer sizes. A remote attacker can exploit this vulnerability by supplying specially crafted XML input to an application that processes data with the...

Important: Red Hat Security Advisory: expat security update

An update for expat is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

httpd: httpd: Denial of Service via integer overflow in mod_dav_fs

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Exploit for CVE-2026-62356

English | 中文 CVE-2026-62356 — Re...

Vulnerabilities are handled in GitLab through GitLab Inc.

GitLab has identified 12 vulnerabilities in the GitLab Community Edition and Enterprise Edition. One of these vulnerabilities is classified as critical. GitLab has addressed this vulnerability in both the GitLab Community Edition and Enterprise Edition, starting from version 7.0 up to certain 19....

[SECURITY] [DLA 4849-1] expat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4849-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura October 22, 2026 https://wiki.debian.org/LTS -...

CLSA-2026-1792649282 Fix CVE(s): CVE-2026-84732

SECURITY UPDATE: Remote denial of service via TLS retransmit timeout integer overflow - debian/patches/CVE-2026-84732.patch: cap the exponential backoff of the reliable layer retransmit timeout, limit --tls-timeout and ignore ACKs for packet IDs outside the send window in src/openvpn/options.c,...

Exploit for CVE-2026-110264

CVE-2026-110264: GitLab Unauthenticated RCE via Onigmo Regex I...

ALPINE-CVE-2026-110264

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...

AZL-111071 CVE-2026-110264 affecting package ruby for versions less than 3.3.13-0

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...

DEBIAN-CVE-2026-110264

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...

CVE-2026-110264

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to...