ALPINE-CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

EUVD-2026-90894

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

PT-2026-103928

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.68 Description A Use After Free issue exists in the mod rewrite module when utilizing the lookahead feature %LA-U:HTTP:.... Use After Free is a memory corruption flaw that occurs when an applicatio...

MGASA-2026-0368 Updated perl-XML-Bare packages fix security vulnerabilities

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes...

Updated perl-XML-Bare packages fix security vulnerabilities

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes...

CVE-2026-52737 ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticated P2P peer can answer Zebra's outbound getblocks or FindBlocks request with a small two-hash inventory and then serve a syntactically valid block whose coinbase height is far above the local chain tip. In...

CVE-2026-52737 ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticated P2P peer can answer Zebra's outbound getblocks or FindBlocks request with a small two-hash inventory and then serve a syntactically valid block whose coinbase height is far above the local chain tip. In...

CVE-2026-57074

A flaw was found in perl-XML-Bare. The parsercparse function, which handles XML parsing, contains an unbounded character lookahead vulnerability. A remote attacker could exploit this by providing a specially crafted, truncated XML string. This could cause the parser to attempt to read data beyond...

[SECURITY] [DSA 6411-1] aom security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6411-1 [email protected] https://www.debian.org/security/ Aron Xu August 05, 2026 https://www.debian.org/security/faq -...

openSUSE 16 Security Update : perl-XML-Bare (openSUSE-SU-2026:21435-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21435-1 advisory. Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes bsc1271640 - CVE-2026-57074: Fixed unbounded...

Security update for perl-XML-Bare (moderate)

openSUSE security update: security update for perl-xml-bare ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21435-1 Rating: moderate References: bsc1271637 bsc1271640 Cross-References: CVE-2026-13401 CVE-2026-57074 CVSS scores: CVE-2026-13401 SUSE :...

OPENSUSE-SU-2026:21435-1 Security update for perl-XML-Bare

This update for perl-XML-Bare fixes the following issues: Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes bsc1271640 - CVE-2026-57074: Fixed unbounded character lookahead bsc1271637...

SUSE CVE-2026-57074

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...

CVE-2026-57073

HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read. Note that t...

UBUNTU-CVE-2026-57074

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...

CVE-2026-57074

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...

CVE-2026-57074

The XML::Bare Perl module (versions through 0.53 ) is vulnerable to an out-of-bounds read due to an unbounded character lookahead in the parserc_parse function. The parser fails to verify that offsets are within the buffer when checking for multicharacter strings like . For example, truncated str...

EUVD-2026-44966

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...

CVE-2026-57074

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...