CVE-2026-97705

The Moleculer microservices framework for Node.js is vulnerable to an unauthenticated Denial of Service (DoS) in versions prior to 0.14.36 and 0.15.2 . The root cause is located in the Parser._write function within src/transporters/tcp/parser.js, where Buffer.prototype.readInt32BE is used to read...

Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2026-3265)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3265 advisory. hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 A flaw was found in Redis community. The cluster bus...

Important: valkey

Issue Overview: hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly...

CVE-2026-78633

The Okta RADIUS Agent contains a Denial of Service vulnerability due to improper validation of the sub-attribute length during the parsing of a Vendor-Specific attribute . If a sub-attribute length of zero is provided, the parser enters an infinite loop , leading to worker-thread exhaustion . Thi...

CVE-2026-78633 Denial of Service in Okta RADIUS Agent Packet Parser

The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests...

CLSA-2026-1791483256 php: Fix of 9 CVEs

CVE-2025-1218: fix out-of-bounds reads in the mysqlnd wire protocol packet parser GHSA-r6x9-5r99-36j7...

CLSA-2026-1791484612 php: Fix of 9 CVEs

CVE-2025-1218: fix out-of-bounds reads in the mysqlnd wire protocol packet parser GHSA-r6x9-5r99-36j7...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4491-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

SUSE SLES16 Security Update : valkey (SUSE-SU-2026:23986-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23986-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4493-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4493-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

Security update for valkey

This update for valkey fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4493-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

Security update for valkey

This update for valkey fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4491-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

openSUSE 16 Security Update : valkey (openSUSE-SU-2026:21985-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21985-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the...

Security update for valkey (important)

openSUSE security update: security update for valkey ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21985-1 Rating: important References: bsc1281417 Cross-References: CVE-2026-92925 CVSS scores: CVE-2026-92925 SUSE : 7.1...

OPENSUSE-SU-2026:21985-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

SUSE-SU-2026:23986-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

SUSE SLES15 Security Update : redis7 (SUSE-SU-2026:4375-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4375-1 advisory. This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...