CVE-2026-103936

The libp2p JavaScript networking stack is vulnerable in versions prior to 6.0.28 due to improper handling of unauthenticated STUN Binding Requests within the @libp2p/webrtc Node.js listener. The stun-listener.ts component forwards the request.ufrag value into DirectRTCPeerConnection.setLocalDescr...

EUVD-2026-102224

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/webrtc webRTCDirect Node.js listener processes unauthenticated STUN Binding Requests before PeerId authentication, Noise, muxing, protocol negotiation, connection creation, or connection-manager...

EUVD-2026-102222

Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendars/, where helium/feed/services/icalexternalcalendarservice.py uses validateurl to check only URL syntax before passin...

CVE-2026-55875

Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendars/, where helium/feed/services/icalexternalcalendarservice.py uses validateurl to check only URL syntax before passin...

CVE-2026-102527 Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2.5 until 6.7.0, the dynamic /og/d/.png route accepts unsigned requests while resolvePathCacheKey produces cache keys from the request path, site URL, and normalized rendering options exposed through image URLs and server...

Portable SDK for UPnP Devices – Resource Management Error Vulnerability

Portable SDK for UPnP Devices. Versions prior to 2.0.0 of the Portable SDK for UPnP Devices contain a resource management vulnerability. This vulnerability stems from the ixml DOM traversal function’s unlimited recursive processing of deeply nested XML. Unauthorized local network attackers can...

TSG Profleet SQL Injection Vulnerability

Versions of TSG Profleet prior to 16/10/2026 contained an SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the Identificación parameter in the /cgi-bin/index.php file. It could allow SQL injections, and attackers could use GET requests to retrieve, create, update...

Mattermost authorization issue vulnerabilities

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have an authorization issue vulnerability. This vulnerability stems from the combination of unvalidated guest and...

LoopX-project: LoopX input validation error vulnerability

The LoopX-project versions from 0.0.1 to 0.4.5 had security vulnerabilities. These vulnerabilities stemmed from the status server setting Access-Control-Allow-Origin: without authentication. This allowed attackers to read control plane status, target and running information, local absolute paths,...

zmister2016 MrDoc Authorization Issue Vulnerability

zmister2016 MrDoc versions 1.1.1 and earlier have an authorization issue. This vulnerability stems from the lack of object-level authorization in the ImportLocalDoc API. It may allow authenticated users to modify other users’ documents and projects by sending PUT requests containing arbitrary...

Astra Linux – vulnerability in Firefox and Thunderbird

A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args. This will assist in validating the userq input arguments and rejecting invalid userq requests during IOCTLs...

Astra Linux – vulnerability in xwayland, xorg-server

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, which may lead to an integer overflow and result in bypassing the size check...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users’ passwords, allowing for full domain takeover...

Astra Linux – vulnerability in waitress

Waitress versions up to 1.3.1 would parse the Transfer-Encoding header and look for a single string value; if that value was not chunked, it would fall back to using the Content-Length header instead. According to the HTTP standard, Transfer-Encoding should be a comma-separated list, with the...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermateconfigcomplete Syzkaller has identified a use-after-free bug 1 in the powermate driver. This occurs when the device is disconnected, causing memory to be freed from the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been fixed: ksmbd: Fixed an out-of-bounds write issue in smb2getea. smb2getea applies a 4-byte alignment padding using memset after writing each EA entry. The bounds check on buffreelen is performed before the memcpy operation, but the...

Astra Linux – vulnerability in squid

An issue was found in Squid versions prior to 4.15 and 5.x prior to 5.0.6. Due to a memory management bug, it is vulnerable to a Denial of Service attack targeting all clients using the proxy via HTTP Range request processing...

Astra Linux – Vulnerability in Tomcat9

There is a vulnerability related to improper input validation in Apache Tomcat. Tomcat did not restrict HTTP/0.9 requests to only the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET requests, users could bypass this constraint on GET requests by...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Handle EBUSY correctly Since essiv only handles the special return value of EINPROGERSS, it frees any data associated with the request in all other cases. However, since the caller of essiv may specify MAYBACKLOG,...