CVE-2026-62966

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in src/WebRequest.cpp frees itemBuffer and sets it to NULL when BOUNDARYORDATA matches the closing boundary of a file part, before confirming...

CVE-2026-116587

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. Prior to 4.1.6, go-jose parses attacker-controlled RSA modulus and prime values from...

CVE-2026-58458

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted worldgendata with an invalid Kle...

CVE-2026-58458 Don't Starve Together Memory Corruption via world_gen_data

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted worldgendata with an invalid Kle...

EUVD-2026-112278

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted worldgendata with an invalid Kle...

PT-2026-128349

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted world gen data with an invalid...

CVE-2026-58458: Out-of-bounds Write

Don't Starve Together Steam AppID 322330 through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted worldgendata with an invalid Kle...

EUVD-2026-110467

Go JOSE: DoS when parsing JWKs that contain RSA keys...

MGASA-2026-0539 Updated iperf package fixes security vulnerabilities

Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...

Updated iperf package fixes security vulnerabilities

Iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion. CVE-2026-71217 Unbounded peer-controlled allocation in iperf3 jsonread allows unauthenticated remote memory exhaustion. CVE-2026-71218 Iperf3 3.21 esnet/iperf contains a...

CVE-2026-82953 Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service

NULL pointer dereference in the RTMP protocol implementation in Apache bRPC version onfailid, causing the process to crash. Affected Scenarios: Run an Apache bRPC RTMP server whose RtmpService::NewStream may return null i.e., the service rejects createStream requests. A remote client that sends a...

CVE-2026-82953 Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service

NULL pointer dereference in the RTMP protocol implementation in Apache bRPC version onfailid, causing the process to crash. Affected Scenarios: Run an Apache bRPC RTMP server whose RtmpService::NewStream may return null i.e., the service rejects createStream requests. A remote client that sends a...

RHEL 10 : kernel (RHSA-2026:81406)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:81406 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: thermal: core: Fix thermal...

SUSE SLED15: libsoup-2_4-1 / libsoup2-devel / libsoup2-lang / etc (SUSE-SU-2026:4703-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4703-1 advisory. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy...

Security update for libsoup2

This update for libsoup2 fixes the following issues: CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. CVE-2026-15711:...

SUSE-SU-2026:4690-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711:...

SUSE SLES15 Security Update : iperf (SUSE-SU-2026:4678-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4678-1 advisory. - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion...

Astra Linux – Vulnerability in ffmpeg

There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/vfvmafmotion.c, within the convolutiony8bit module. This vulnerability could allow a remote malicious user to cause a Denial of Service attack...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7

Python-Markdown version 3.8 contains a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Since Python-Markdown does not catch this exception, any application that processes Markdown controlled by...