30602 matches found
PT-2026-75708
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.7-tuxcare.1...
PT-2026-75542
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.0-tuxcare.1...
PT-2026-74120
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.3-tuxcare.1...
CVE-2026-68494: Allocation of Resources Without Limits or Throttling
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...
PT-2026-75614
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 3.2.0-tuxcare.2...
PT-2026-74835
TuxCare rebuilt socket.io-parser to address 2 CVEs. Fixed in 3.4.3-tuxcare.1...
RHEL 8 : python3 (RHSA-2026:50064)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50064 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-016 (ALASGIMP-2026-016)
The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-016 advisory. A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscannergettoken...
Linux Distros Unpatched Vulnerability : CVE-2026-64565
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix heap-buffer-overflow in imspcuprocessdata The imspcuprocessdata processes incoming URB data byte by byte. However, it fails to check if the...
PT-2026-74510
TuxCare rebuilt socket.io-parser to address 4 CVEs. Fixed in 3.1.3-tuxcare.1...
PT-2026-75102
TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 3.17.5-tuxcare.1...
PT-2026-74836
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 4.2.4-tuxcare.1...
PT-2026-67893
Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 3.6.6 OpenSIPS versions prior to 4.0.0-rc1 Description The find line delimiter function in the multipart body parser performs an out-of-bounds read via strncmp when searching for MIME boundary delimiters. This occurs...
PT-2026-75151
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.19.0-tuxcare.1...
PT-2026-67672
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow exists in the ims-pcu component. The function ims pcu process data processes incoming URB data byte by byte but does not verify if the read pos index exceeds IMS P...
PT-2026-74621
TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 13.1.2-tuxcare.1...
Important: gimp
Issue Overview: A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscannergettoken function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory...
SUSE CVE-2026-18446
fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...
SUSE CVE-2026-18581
A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input 9|9| can lead to reachable assertion. The attack requires...
AZL-94553 CVE-2026-69244 affecting package python-aiohttp 3.6.2-3
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigg...