44637 matches found
CVE-2026-53878
An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. DomainNameValidator does not prohibit newlines in domain names unless used via a form field, since CharField strips newlines. If an application uses values with newlines in an HTTP response, header injection can occur. Djan...
CVE-2026-53878
CVE-2026-53878 affects Django 6.0 before 6.0.7 and 5.2 before 5.2.16. The issue lies in DomainNameValidator not prohibiting newlines in domain names, which can enable header injection if an application places such values in an HTTP response. Django itself remains unaffected because HttpResponse b...
CVE-2026-53878
An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. DomainNameValidator does not prohibit newlines in domain names unless used via a form field, since CharField strips newlines. If an application uses values with newlines in an HTTP response, header injection can occur. Djan...
CVE-2026-53878
An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. DomainNameValidator does not prohibit newlines in domain names unless used via a form field, since CharField strips newlines. If an application uses values with newlines in an HTTP response, header injection can occur. Djan...
CVE-2026-14940
Affected software/component: 389 Directory Server (389-ds-base). Vulnerability: heap-buffer-overflow in DN normalization when processing a legacy-quoted value encoding a multivalued nested RDN, causing writes past the end of a heap allocation. Attack scenario: an unauthenticated remote attacker c...
CVE-2026-14940 389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn
A heap-buffer-overflow flaw was found in 389 Directory Server 389-ds-base. When normalizing a Distinguished Name DN that contains a legacy-quoted value encoding a multivalued nested Relative Distinguished Name RDN, the server can write past the end of a heap allocation while sorting RDN...
EUVD-2026-42042
A heap-buffer-overflow flaw was found in 389 Directory Server 389-ds-base. When normalizing a Distinguished Name DN that contains a legacy-quoted value encoding a multivalued nested Relative Distinguished Name RDN, the server can write past the end of a heap allocation while sorting RDN...
CVE-2026-14940
A heap-buffer-overflow flaw was found in 389 Directory Server 389-ds-base. When normalizing a Distinguished Name DN that contains a legacy-quoted value encoding a multivalued nested Relative Distinguished Name RDN, the server can write past the end of a heap allocation while sorting RDN...
MAL-2026-7430 Malicious code in ureactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-as-belonged (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7078 Malicious code in @jesusvizcaino2021/app-push-base (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7047 Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9870 Malicious code in zwknum7 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrzjtf69db (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zlam_lamb13300 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9389 Malicious code in wmwk2nobab (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9297 Malicious code in wandsworthproxyabcabc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9269 Malicious code in wandsdock7wre22mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tmpfjbgghjfcigl (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
RLSA-2026:35832 Important: golang-github-openprinting-ipp-usb security update
HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fixes: net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 crypto/x509: golang: golang...