304706 matches found
CLSA-2026-1790876611 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.18-tuxcare.3...
CVE-2026-103923 KaTeX: Existing prototype pollution can bypass trust restrictions
KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses ordinary JavaScript property access for the renderer options object, the trust setting, default and processor setting metadata, and namespace lookup and group restoration,...
com.erudika:para-search-elasticsearch (>=1.43.1, <=1.43.2), com.netflix.atlas_v1:atlas-chart_2.13 (>=1.9.0-rc.12, <=1.9.0-rc.20) +479 more potentially affected by CVE-2026-68496 via tools.jackson.dataformat:jackson-dataformat-smile (>=3.2.0, <=3.2.1)
tools.jackson.dataformat:jackson-dataformat-smile MAVEN version =3.2.0, =1.43.1, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.12, =1.9.0-rc.20 and mor...
ai.timefold.solver:timefold-solver-migration (>=1.7.0, <=1.23.0), com.alibaba.fastjson2:fastjson2-extension-spring5 (>=2.0.43, <=2.0.58) +1084 more potentially affected by CVE-2026-68496 via com.fasterxml.jackson.dataformat:jackson-dataformat-smile (>=2.16.0, <=2.18.9)
com.fasterxml.jackson.dataformat:jackson-dataformat-smile MAVEN version =2.16.0, =1.7.0, =2.0.43, =0.0.23, =0.0.2, =0.0.11, =1.0.0, =0.0.3, =0.0.3, =1.41.0, =1.49.1, =1.49.1, =1.50.6 and more Source cves: CVE-2026-68496 Source advisory: MEND:CVE-2026-68496...
CLSA-2026-1790875447 TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.16-tuxcare.1...
CVE-2023-54404 Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation
Zod schema-validation library through 4.6.5, fixed in commit e06a510, contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the...
360solutions-bc-mcp (0.5.7), acapy-agent (>=1.6.1rc0, <=1.7.0) +200 more potentially affected by CVE-2026-102266 via pyjwt (2.13.0)
pyjwt PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - 360solutions-bc-mcp 0.5.7 - acapy-agent =1.6.1rc0, =0.1.8, =0.0.116, =1.420.5, =26.6.0, =0.25.0, =0.57.0, =0.1.0, =0.1.0, =1.1.0, =3.8.0, =3.9.3 and...
10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1465 more potentially affected by CVE-2026-102271 via pyjwt (>=2.4.0, <=2.13.0)
pyjwt PYPI version =2.4.0, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.8, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =0.1.1, =0.1.15 - aegis-security-console 2.4.0 and more Source cves: CVE-2026-102271 Source advisory: OSV:PYSEC-2026-4149...
0xpwn (0.1.1), a2a-acl (0.0.14) +745 more potentially affected by CVE-2026-59823 via litellm (>=1.0.0, <=1.83.8)
litellm PYPI version =1.0.0, =0.3.5, =0.7.3, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.1.0, =0.1.1 and more Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...
prompt2model (0.0.9) potentially affected by CVE-2026-59823 via litellm (0.1.583)
litellm PYPI version 0.1.583 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - prompt2model 0.0.9 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...
swarm-plus (>=0.0.0.1, <=0.1.0) potentially affected by CVE-2026-56104 via chainlit (1.3.1)
chainlit PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - swarm-plus =0.0.0.1, =0.1.0 Source cves: CVE-2026-56104 Source advisory: OSV:PYSEC-2026-4028...
PYSEC-2026-4134 PickleScan has multiple stdlib modules with direct RCE not in blocklist
Summary picklescan v1.0.3 latest does not block at least 7 Python standard library modules that provide direct arbitrary command execution or code evaluation. A malicious pickle file importing these modules is reported as having 0 issues CLEAN scan. This enables remote code execution that bypasse...
PickleScan has multiple stdlib modules with direct RCE not in blocklist
Summarypicklescan v1.0.3 latest does not block at least 7 Python standard library modules that provide direct arbitrary command execution or code evaluation. A malicious pickle file importing these modules is reported as having 0 issues CLEAN scan. This enables remote code execution that bypasses...
CVE-2026-85228
A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...
CLSA-2026-1790872344 TuxCare security update for drupal/core (2 CVEs)
TuxCare rebuilt drupal/core to address 2 CVEs. Fixed in 10.5.12-p1+tuxcare...
CLSA-2026-1790872226 TuxCare security update for zendframework/zendframework (1 CVE)
TuxCare rebuilt zendframework/zendframework to address 1 CVE. Fixed in 2.4.13-p2+tuxcare...
CLSA-2026-1790870726 TuxCare security update for deepmerge-ts (1 CVE)
TuxCare rebuilt deepmerge-ts to address 1 CVE. Fixed in 7.1.5-tuxcare.1...
CLSA-2026-1790870256 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.14-tuxcare.2...