CVE-2026-101896

The @angular/router component is vulnerable to a Denial of Service (DoS) attack when Server-Side Rendering (SSR) is enabled on Node.js (V8). The root cause is the inefficient handling of numeric matrix parameter names and numeric outlet names in URL paths. When these are parsed, V8 interprets the...

CVE-2026-101896: Uncontrolled Resource Consumption

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angular/router URL parser stores numeric matrix parameter names and numeric outlet names as properties on initially empty...

OPENSUSE-SU-2026:12133-1 matrix-synapse-1.163.0-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.163.0-1.1 package on the GA media of openSUSE Tumbleweed...

graphw00f

Créditos a Nick Aleks por el logo! graphw00f - Fingerprinting de servidores GraphQL Tabla de Contenidos ¿Cómo funciona? Detecciones Matriz de Amenazas GraphQL Requisitos previos Instalación Configuración Ejemplo de uso Fingerprinting de GraphQL Detección y Fingerprinting de GraphQL Soporte e...

rakkess

rakkess Revisar Acceso - plugin de kubectl para mostrar una matriz de acceso para recursos del servidor Introducción ¿Alguna vez te has preguntado qué derechos de acceso tienes en un clúster de Kubernetes proporcionado? Para recursos individuales puedes usar kubectl auth can-i list deployments,...

graphql-threat-matrix

GraphQL Threat Matrix ¿Por qué graphql-threat-matrix? graphql-threat-matrix fue creado para cazadores de recompensas, investigadores de seguridad y hackers, con el fin de ayudar a descubrir vulnerabilidades en múltiples implementaciones de GraphQL. Las diferencias en cómo las implementaciones de...

CVE-2026-96580

The Gitea Actions service is vulnerable to memory exhaustion because it expands a workflow's static strategy.matrix into a full Cartesian product without a size limit during run creation. This occurs before the fork pull request approval gate is applied, allowing a user with permission to open a ...

GHSA-G7FW-3GJP-G5HF OpenClaw: Channel read actions could skip target allowlists

Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft Teams, Feishu, Matrix, and Google Chat could reach channels or rooms outside the configured read policy. This advisory is scoped to caller-supplied targets for message, reaction, pi...

OpenClaw: Channel read actions could skip target allowlists

Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft Teams, Feishu, Matrix, and Google Chat could reach channels or rooms outside the configured read policy. This advisory is scoped to caller-supplied targets for message, reaction, pi...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fixed a memory leak in the vfioap device driver. The device release callback function invoked to release the matrix device uses the devgetdrvdata function to retrieve the pointer to the vfiomatrixdev object in order...

Astra Linux – Vulnerability in Thunderbird

matrix-js-sdk is a client-server SDK for the Matrix messaging protocol, designed for JavaScript. Version 34.11.0 and earlier of matrix-js-sdk was vulnerable to client-side path traversal attacks through crafted MXC URIs. A malicious room member could trigger clients using matrix-js-sdk to send...

CLEANSTART-2024-FT51773 logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12

Security vulnerability affects the element-web package. A logic error in the room key sharing functionality of matrix-js-sdk aka Matrix Javascript SDK before 12...

CLEANSTART-2024-KG85356 matrix-react-sdk is a Matrix chat protocol SDK for React Javascript

Security vulnerability affects the element-web package. matrix-react-sdk is a Matrix chat protocol SDK for React Javascript...

CLEANSTART-2024-IV81629 matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript...

CLEANSTART-2024-EM09581 Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript...

CLEANSTART-2024-VR88487 Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript...

CLEANSTART-2024-YV48715 Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript

Security vulnerability affects the element-web package. Matrix JavaScript SDK is the Matrix Client-Server software development kit SDK for JavaScript...

CLEANSTART-2024-QT51844 Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript...

CLEANSTART-2024-KH83435 matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript

Security vulnerability affects the element-web package. matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript...

CLEANSTART-2024-LQ80354 matrix-react-sdk is a Matrix chat protocol SDK for React Javascript

Security vulnerability affects the element-web package. matrix-react-sdk is a Matrix chat protocol SDK for React Javascript...