DEBIAN-CVE-2026-12151

Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size...

UBUNTU-CVE-2026-12151

Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size...

CVE-2026-9679

Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 §5.4 does not specify any decoding and browsers do not decode either. Applications that parse a...

CGA-VHHH-3GGV-2X45

Bulletin has no description...

CGA-MXWC-VWW2-3Q6Q

Bulletin has no description...

CGA-H3VR-468G-VFG2

Bulletin has no description...

CVE-2026-48591 Stored XSS via unescaped HTML attribute values in earmark

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...

CVE-2026-48591 Stored XSS via unescaped HTML attribute values in earmark

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...

EUVD-2026-37761

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...

MINI-9G3F-JM52-5VCC

Bulletin has no description...

MINI-RJGP-HVFC-VVGM

Bulletin has no description...

MINI-RG63-2XPQ-3P2J

Bulletin has no description...

MINI-5C25-V63V-42M8

Bulletin has no description...

MINI-7P69-F6M2-CC4R

Bulletin has no description...

MINI-JX2C-GF52-2PW6

Bulletin has no description...

MINI-FVCQ-7XM6-XVX9

Bulletin has no description...

MINI-GC3H-MGPF-54F6

Bulletin has no description...

MINI-5273-PRF6-H7F2

Bulletin has no description...

MINI-HF8X-63C9-G428

Bulletin has no description...

MINI-P4W5-HP5R-GR3M

Bulletin has no description...