30737 matches found
@datastream/validate (>=0.1.4, <=0.7.0), @lukoweb/apitogo (>=0.1.0, <=0.2.31) +8 more potentially affected by CVE-2026-15195 via @apidevtools/json-schema-ref-parser (>=15.1.1, <=15.3.5)
@apidevtools/json-schema-ref-parser NPM version =15.1.1, =0.1.4, =0.1.0, =0.1.26, =0.12.0, =0.8.2, =1.0.4, =2.12.0, =3.1.1-alpha-1765531917303-eb0309c.0, =1.5.15, =0.0.0-chore-migrate-to-snippetz.zccff2a2a, =0.82.4 Source cves: CVE-2026-15195 Source advisory:...
Prototype Pollution
Overview @apidevtools/json-schema-ref-parser is a Parse, Resolve, and Dereference JSON Schema $ref pointers Affected versions of this package are vulnerable to Prototype Pollution in the Pointer.set process. An attacker can modify object prototype attributes by supplying crafted input to the...
CVE-2026-15308
A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...
USN-8526-1: libheif vulnerabilities
Xianrui Dong discovered that libheif had an out-of-bounds read in its HEIF sequence track parser. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. This issue only affected Ubuntu 26.04 LTS. CVE-2026-47254 Junyi Liu discovered that libheif had...
SUSE-SU-2026:2835-1 Security update for clamav
This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service bsc1270107. - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remote attacker to cause a denial of service...
Security update for clamav
This update for clamav fixes the following issues CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service bsc1270107. CVE-2026-20214: FSG file format parser could allow an unauthenticated, remote attacker to cause a denial of service...
CVE-2026-15195
A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...
AZL-92271 CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1
The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data...
DEBIAN-CVE-2026-15308
The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data...
CVE-2026-15308
The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data...
UBUNTU-CVE-2026-15308
The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data...
CVE-2026-15308
The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data...
CVE-2026-15195
The CVE affects the apidevtools json-schema-ref-parser package up to version 15.3.5. The vulnerability targets the Refs.set/Pointer.set paths in lib/pointer.ts, enabling remote modification of object prototype attributes (prototype pollution) as described. Impact is described as remote exploitati...
CVE-2026-15195 apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution
A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...
CVE-2026-15195
A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...
EUVD-2026-42651
A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...
CVE-2026-15195 apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution
A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...
CVE-2026-15195 apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution
A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...
1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6), 1shot (>=0.0.1, <=0.0.2) +8358 more potentially affected by CVE-2026-15195 via @apidevtools/json-schema-ref-parser (>=8.0.0, <=15.3.5)
@apidevtools/json-schema-ref-parser NPM version =8.0.0, =1.0.5, =0.0.1, =0.1.1, =0.0.1-251008.90016, =2.0.1, =1.0.0, =1.3.0, =0.0.53, =0.0.31, =3.11.3, =1.0.0, =1.0.0, =1.1.1-pr-7-1d68cf28da, =2.13.2 and more Source cves: CVE-2026-15195 Source advisory: MEND:CVE-2026-15195...