3430 matches found
ROOT-APP-GOBINARY-CVE-2024-45337 CVE-2024-45337 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2024-45337 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root
Root has patched CVE-2026-66034 in the libssh2 package for Root:Alpine:3.22. Multiple fixed versions available...
CVE-2025-1302_jsonpath-plus_RCE
CVE-2025-1302 JSONPath-Plus RCE PoC PoC Script Name: poc.py A proof-of-concept exploit script for CVE-2025-1302, which targets an RCE vulnerability in the jsonpath-plus library. When run against a vulnerable service endpoint, the script attempts to trigger remote code execution via a JSONPath...
ROOT-APP-NPM-CVE-2026-65902 CVE-2026-65902 in dompurify - Patched by Root
Root has patched CVE-2026-65902 in the dompurify package for Root:npm. Multiple fixed versions available...
DEBIAN-CVE-2026-61721
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loopstart and wsmp.looplength values to samples without calling fluidsamplevalidate or fluidsamplesanitizeloop. A crafted DLS file can place...
ROOT-OS-DEBIAN-13-CVE-2026-56373 CVE-2026-56373 in imagemagick - Patched by Root
Root has patched CVE-2026-56373 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...
Astra Linux – Vulnerability in sdl-image1.2
SDLimage is a library for loading images of various formats as SDL surfaces. In the dolayersurface function in src/IMGxcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without being validated against the colormap size cmnum. A crafted .xcf file with a smal...
Astra Linux – Vulnerability in libvpx
There is a heap overflow vulnerability in libvpx. Encoding a frame with dimensions larger than the originally configured size using VP9 may lead to a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or higher...
Astra Linux – Vulnerability in libde265
It was discovered that Libde265 v1.0.8 contains an unknown vulnerability through the ffhevcputhevcqpelh3v3sse function in sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack using a specially crafted video file...
Astra Linux – Vulnerability in SOX
A heap buffer overflow vulnerability was discovered in sox, within the lsxreadbuf function at sox/src/formatsi.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure...
Astra Linux – Vulnerability in TIF format
LibTIFF 4.4.0 contains an out-of-bounds write vulnerability in TIFFmemcpy in libtiff/tifunix.c:346, when called from extractImageSection, located at tools/tiffcrop.c:6826. This vulnerability allows attackers to cause a denial-of-service attack through a crafted TIFF file. For users who compile...
DEBIAN-CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
ROOT-APP-COMPOSER-AIKIDO-2026-248927 AIKIDO-2026-248927 in magento/product-community-edition - Patched by Root
Root has patched AIKIDO-2026-248927 in the magento/product-community-edition package for Root:Composer. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-37901 CVE-2025-37901 in linux - Patched by Root
Root has patched CVE-2025-37901 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
MINI-H62M-6JG8-FMXP
Bulletin has no description...
@edgebrix-sdk/react (>=0.0.58, <=0.0.74), @kimia_software/tellair-wc (0.0.0) +16 more potentially affected by CVE-2026-56812 via phoenix (>=1.6.2, <=1.6.16)
phoenix NPM version =1.6.2, =0.0.58, =0.8.10, =0.1.8, =0.1.5, =0.1.0-rc0, =0.8.1, =0.0.1, =0.0.1, =0.0.0-PR-1--182e1d3, =19.0.0-beta.1, =1.0.23, =0.3.0, =0.1.1, =0.1.6 and more Source cves: CVE-2026-56812 Source advisory: OSV:GHSA-63MC-HW7G-86RR...
@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-62681 via orval (8.5.3)
orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-62681 Source advisory: OSV:GHSA-FG9P-MRXR-HVQ7...
CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...