CVE-2026-97057 redis-parser through 3.0.0 Denial of Service via Invalid Array Length

redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...

CVE-2026-97057

redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...

EUVD-2026-85883

redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint can deliver a crafted RESP header with a length abov...

SUSE-SU-2026:23918-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESR MFSA 2026-93, bsc1280371: - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss (CVE-2026-41305)

Summary A Denial of Service vulnerability in the postcss CSS transformation parser CVE-2026-41305 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.5.23. Vulnerability Details CVEID:CVE-2026-41305 DESCRIPTION: PostCSS takes a CSS file and...

CLEANSTART-2026-JF73384 sqlparse is a non-validating SQL parser module for Python

Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...

CLEANSTART-2026-PH27311 sqlparse is a non-validating SQL parser module for Python

Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...

CLEANSTART-2026-ZF06742 sqlparse is a non-validating SQL parser module for Python

Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...

CLEANSTART-2026-AA29461 sqlparse is a non-validating SQL parser module for Python

Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...

CLEANSTART-2026-JT70619 sqlparse is a non-validating SQL parser module for Python

Security vulnerability affects the airflow-3 package. sqlparse is a non-validating SQL parser module for Python...

thunderbird: One byte overflow read in mail parser

A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed mail header. This could lead to a one-byte read past the end of a buffer, potentially resulting in information disclosure or other unpredictable behavior...

firefox: thunderbird: Use-after-free in the DOM: HTML Parser component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component...

thunderbird: Out-of-bounds read in IMAP response parser

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is...

PT-2026-97800

Name of the Vulnerable Software and Affected Versions redis-parser versions prior to 3.0.1 Description An issue exists in the RESP Redis Serialization Protocol parsing where the multi-bulk length value is not properly validated. A malicious or compromised Redis endpoint can send a crafted RESP...

PT-2026-105013

An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

PT-2026-97978

Name of the Vulnerable Software and Affected Versions libXi versions prior to 1.8.4 Description An out-of-bounds read occurs in the XI2 class parser of libXi. This flaw allows a malicious X server to cause a crash of an attached X client. An out-of-bounds read is a condition where a program reads...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124537 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding...

CVE-2026-88358

simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded. A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument to access buflen after the input buffer has been...

PT-2026-98220

Name of the Vulnerable Software and Affected Versions zbateson/mail-mime-parser versions 2.0.0 through 3.0.5 zbateson/mail-mime-parser versions 4.0.0 through 4.0.1 Description An uncontrolled resource consumption and algorithmic complexity issue affects applications parsing untrusted emails. Thre...

CVE-2026-97449

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add package limit checks in parser functions Add package limit checks in parser functions to prevent out-of-bounds access...