324111 matches found
CLSA-2026-1790937670 TuxCare security update for piscina (1 CVE)
TuxCare rebuilt piscina to address 1 CVE. Fixed in 4.6.1-tuxcare.2...
CLSA-2026-1790937659 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.15-tuxcare.3...
CLSA-2026-1790937656 TuxCare security update for devalue (4 CVEs)
TuxCare rebuilt devalue to address 4 CVEs. Fixed in 5.9.1-tuxcare.1...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the THeaderProtocol. An attacker can cause the application to crash by sending specially crafted input that triggers a stack-based buffer overflow. Remediation Upgrade thrift to version 0.25.0 or higher. Referenc...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Dart bindings when processing input with inconsistent length parameters. An attacker can cause excessive memory allocation by sending specially crafted input, potentially...
Malicious Package
Overview alexa-cybertron-team-code-review-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Malicious Package
Overview ai-workshop-radio-lambda is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview ai-workshop-maa15-radio is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
com.ascentstream.pulsar:bcfips-include-test (>=2.10.6.9, <=3.0.8.0-snapshot-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=2.10.6.9, <=3.0.14.1) +20 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcpkix-fips (>=1.0.1, <=1.0.12)
org.bouncycastle:bcpkix-fips MAVEN version =1.0.1, =2.10.6.9, =2.10.6.9, =2.1.2, =8.0.0, =1.2.0, =1.17.0, =1.17.0, =1.0.0, =1.0.0, =3.0.0-rc1, =3.0.0-rc6, =1.0.0, =1.0.1 - io.skuber:skuber-examples2.12 2.6.3 - io.skuber:skuber-examples2.13 2.6.3 and more Source cves: CVE-2026-17508 Source advisor...
Improper Handling of Length Parameter Inconsistency
Overview Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency in the handling of length parameters in the Lua bindings. An attacker can cause excessive resource allocation by sending requests with inconsistent length parameters, potentially...
CLSA-2026-1790929139 TuxCare security update for h11 (1 CVE)
TuxCare rebuilt h11 to address 1 CVE. Fixed in 0.12.0.post1+tuxcare...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19591 more potentially affected by CVE-2026-18036 via org.bouncycastle:bcprov-jdk18on (>=1.72, <=1.85)
org.bouncycastle:bcprov-jdk18on MAVEN version =1.72, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-18036 Source advisory: MEND:CVE-2026-18036...
org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) +4 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcprov-debug-jdk15to18 (>=1.81, <=1.85.1)
org.bouncycastle:bcprov-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-17508 Source advisory: MEND:CVE-2026-17508...
com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +164 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)
org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-17508 Source advisory: MEND:CVE-2026-17508...
com.github.fmjsjx:libnetty-example (>=3.7.2, <=3.8.0-rc1), com.github.manosbatsis.corbeans:corbeans-corda-webserver (>=0.26, <=0.30) +62 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcpkix-lts8on (>=2.73.6, <=2.73.12)
org.bouncycastle:bcpkix-lts8on MAVEN version =2.73.6, =3.7.2, =0.26, =0.26, =0.26, =0.26, =0.0.9-snapshot, =4.1.1-patch-01, =0.0.9-snapshot, =4.12, =4.12, =7.0, =7.5 and more Source cves: CVE-2026-17508 Source advisory: MEND:CVE-2026-17508...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19981 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.85.2)
org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-17508 Source advisory: MEND:CVE-2026-17508...
app.cash.trifle:common (>=0.2.9, <=0.2.10), app.cash.trifle:jvm (>=0.2.8, <=0.2.10) +903 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcpkix-jdk15to18 (>=1.71, <=1.85)
org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.71, =0.2.9, =0.2.8, =0.2.8, =0.2.8, =1.0.1-rc14, =3.5.0.0, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =2.6.4, =0.1.1, =0.1.1, =0.1.1, =0.1.4.2 and more Source cves: CVE-2026-17508 Source advisory: MEND:CVE-2026-17508...
CVE-2026-85016 Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter processor, allowing users with Contributor access who do not hold unfilteredhtml to store a payload that executes when th...
CVE-2026-85016 Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter processor, allowing users with Contributor access who do not hold unfilteredhtml to store a payload that executes when th...
