netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service DoS, where the affected browser tab may...

CVE-2026-14461

A flaw was found in mtr. A remote attacker, by influencing the DNS Domain Name System TXT response used for AS Autonomous System lookups, can trigger an out-of-bound read vulnerability in the ipinfolookup function. This occurs when a DNS response larger than 512 bytes contains a crafted compressi...

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

MAL-2026-10910 Malicious code in mysupergoodpython (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10907 Malicious code in hello-world-test-mh2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a70ea37beb115e4464b5e9ebaf58986f4cd75434257163f4ddb82f5624ea13 setup.py decodes a base64 string and passes the result to exec at install time. The decoded payload is a single print statement that emits a benign...

gnutls: gnutls: Security bypass due to incorrect name constraint handling

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities CAs only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate...

gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...

gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...

gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName DNS or rfc822Name email constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf...

MAL-2026-10860 Malicious code in @gocortexio/npmgremlinbox-ucl-1-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58e0b7489bb5ef9967ddda5eb651a0a399c73ae03e692909f34f864b189bde46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10807 Malicious code in @gocortexio/npmgremlinbox-cc-by-sa-3-0-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a567f9fda6a70475cc32be7b5392bbc1a3c1787b8323c1ff2bc6c237e198fdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

K000162337: WolfSSL vulnerability CVE-2026-6731

Security Advisory Description X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted. CVE-2026-6731 Impact There is no impact; F5 products are not affected by this...

CVE-2026-42566

Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.longname that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be...

PT-2026-67419

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.53 Description Improper escaping of section names in git config files allows the injection of arbitrary configuration directives through malicious submodule names. By utilizing the create submodule or clone from...

CVE-2024-51316

The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the updatedevname function of the file /goform/SetOnlineDevName...

TencentOS Server 3: grafana (TSSA-2026:0638)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0638 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-42566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.longname that contains a malformed...

Linux Distros Unpatched Vulnerability : CVE-2026-63893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: property: Reject u32 wrap in tbpropertyentryvalid entry-value is u32 and entry-length is u16; the sum is performed in u32 and wraps. A malicious...