30561 matches found
PT-2026-74621
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 13.1.2-tuxcare.1...
PT-2026-74837
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 3.3.4-tuxcare.1...
PT-2026-73854
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.1...
PT-2026-74007
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.8.4-tuxcare.1...
PT-2026-74618
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.6-tuxcare.1...
PT-2026-75101
TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 3.19.0-tuxcare.1...
PT-2026-75108
TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 3.14.0-tuxcare.1...
PT-2026-74104
TuxCare rebuilt ua-parser-js to address 3 CVEs. Fixed in 0.7.21-tuxcare.1...
mingw-glib2 security update
2.70.1-9 - Fix CVE-2026-58010: off-by-one error in gvstupleisnormal Resolves: RHEL-212164 2.70.1-8 - Fix CVE-2026-58011: gdatetimeaddfull range validation Resolves: RHEL-212184 2.70.1-7 - Fix CVE-2026-58013: memcmp buffer over-read in giochannel Resolves: RHEL-212234 2.70.1-6 - Fix CVE-2026-58012...
PT-2026-74070
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 11.1.1-tuxcare.1...
PT-2026-67672
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow exists in the ims-pcu component. The function ims pcu process data processes incoming URB data byte by byte but does not verify if the read pos index exceeds IMS P...
PT-2026-67892
Name of the Vulnerable Software and Affected Versions epsilla-cloud vectordb versions prior to 0.3.18 Description An issue exists in the Filter Parser component within the file engine/query/expr/expr.cpp. Specifically, the SplitTokens and ShuntingYard functions fail to properly check for unusual...
Important: gimp
Issue Overview: A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscannergettoken function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory...
PT-2026-75111
TuxCare rebuilt fast-xml-parser to address 7 CVEs. Fixed in 4.4.0-tuxcare.1...
PT-2026-75708
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.7-tuxcare.1...
PT-2026-75542
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.0-tuxcare.1...
PT-2026-74120
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.3-tuxcare.1...
CVE-2026-18401: Allocation of Resources Without Limits or Throttling
The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary length,...
CVE-2026-68494: Allocation of Resources Without Limits or Throttling
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...