PT-2026-96101

Name of the Vulnerable Software and Affected Versions libX11 versions prior to 1.8.14 Description A buffer overflow exists in the handling of XkbGetMap, which can lead to an overflow of the key sym map. This issue allows a malicious X server to exploit the flaw. Recommendations Update libX11 to...

CVE-2026-68919: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

GoCD is a continuous deliver server. From 13.3.0 until 26.1.0, GoCD does not correctly encode and escape malicious material modification comments that mimic the special trackback format used by package materials when rendering the Stage Detail, Job/Build Detail, Value Stream Map, and Pipeline...

PT-2026-104826

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key sym map...

PT-2026-96136

Name of the Vulnerable Software and Affected Versions GoCD versions 13.3.0 through 26.0.x Description GoCD fails to correctly encode and escape malicious material modification comments that mimic the special trackback format used by package materials. This occurs when rendering the Stage Detail,...

Linux Distros Unpatched Vulnerability : CVE-2026-93749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values...

source-map-js allows event-loop denial of service through indexed source-map section offsets

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

@ahmedrowaihi/pdf-forge-assets (>=2.0.0-canary.5, <=2.0.0-canary.6), @ahmedrowaihi/pdf-forge-cli (>=2.0.0-canary.6, <=2.0.0-canary.8) +266 more potentially affected by CVE-2026-93749 via source-map-js (>=1.0.1, <=1.2.1)

source-map-js NPM version =1.0.1, =2.0.0-canary.5, =2.0.0-canary.6, =2.0.0-canary.5, =2.0.0-canary.6, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.0.0-alpha.0, =0.0.2, =4.10.2, =1.1.2, =4.9.2, =1.16.2, =1.2.3, =3.42.3, =3.56.1 and more Source cves: CVE-2026-93749 Source advisory: OSV:GHSA-68FV-2MGG-JV7Q...

GHSA-68FV-2MGG-JV7Q source-map-js allows event-loop denial of service through indexed source-map section offsets

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

@ahmedrowaihi/pdf-forge-assets (>=2.0.0-canary.5, <=2.0.0-canary.6), @ahmedrowaihi/pdf-forge-cli (>=2.0.0-canary.6, <=2.0.0-canary.8) +266 more potentially affected by CVE-2026-93749 via source-map-js (>=1.0.1, <=1.2.1)

source-map-js NPM version =1.0.1, =2.0.0-canary.5, =2.0.0-canary.6, =2.0.0-canary.5, =2.0.0-canary.6, =1.0.0-alpha.0, =1.0.0-alpha.0, =1.0.0-alpha.0, =0.0.2, =4.10.2, =1.1.2, =4.9.2, =1.16.2, =1.2.3, =3.42.3, =3.56.1 and more Source cves: CVE-2026-93749 Source advisory: GHSA-68FV-2MGG-JV7Q...

CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

DEBIAN-CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

AZL-103442 CVE-2026-93749 affecting package js-jquery 3.5.0-4

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

AZL-103478 CVE-2026-93749 affecting package python-tensorboard 2.16.2-6

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

UBUNTU-CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749 source-map-js through 1.2.1 Event Loop Denial of Service

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749 source-map-js through 1.2.1 Event Loop Denial of Service

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-93749

source-map-js (through 1.2.1 ) fails to validate the per-section offset line value in indexed source maps, allowing a remote, unauthenticated attacker to supply an extremely large offset line value. This triggers synchronous event loop blocking for extended periods, preventing the service from ha...

EUVD-2026-83254

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...