Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the XMP profile parser. An attacker can cause excessive resource consumption by submitting a specially crafted XMP profile that triggers intensive processing when determining rational values. Details Denial of...

CVE-2026-76467

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

DRUPAL-CONTRIB-2026-205

This module enables you to "share" a view display within another website via an iframe. The module doesn't sufficiently block access to view displays. Although the views data is not displayed, resource-intensive views could still be executed which could affect site performance. This vulnerability...

Backstage has improper input validation in TechDocs Markdown extension configuration

Impact An authenticated user who can register or modify documentation sources may cause a TechDocs build to access resources outside the intended documentation boundary. Depending on deployment configuration, this may expose sensitive backend-host data or internal network resources. Patches Patch...

CVE-2026-106557 Backstage: Improper input validation in TechDocs Markdown extension configuration

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not sufficiently validate TechDocs Markdown extension configuration. An authenticated user who can register or modify documentation sources may cause a TechDo...

CVE-2026-76467 Cisco Meraki Software Hardening Release - Resource Lifetime Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76467

The Cisco Meraki Software Hardening Release addresses multiple internally discovered vulnerabilities related to improper control of a resource through its lifetime (CWE-664). These issues can impact availability , as indicated by a CVSS 3.1 score of 7.5. While the specific affected components and...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the LZ4BlockInputStream process. An attacker can cause excessive memory allocation and exhaust system resources by supplying a crafted legacy LZ4Block stream with a large compressedLen val...

Memory Allocation with Excessive Size Value

Overview org.lz4:lz4-java is a Java port of the LZ4 compression algorithm and the xxHash hashing algorithm. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the LZ4BlockInputStream process. An attacker can cause excessive memory allocation and...

CVE-2026-107210

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions a...

CVE-2026-107166

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

DEBIAN-CVE-2026-106575

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106565

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed in versions 7.1.2-...

CVE-2026-76500

The Cisco Application Policy Infrastructure Controller (APIC) is affected by vulnerabilities involving improper control of a resource through its lifetime (CWE-664). These issues were identified during an internal security review and are addressed in the October 2026 hardening release . The impac...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS in the bzip2 image data processing. An attacker can cause the application to enter an infinite loop and exhaust system resources by submitting a specially crafted bzip2-compressed image file. Details Denial of...

CVE-2026-107210

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions a...

EUVD-2026-94412

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166 Open5GS GTP-U Receive Path gtp-path.c ogs_pfcp_xact_local_create allocation of resources

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

CVE-2026-107166

The Open5GS software (versions up to 2.7.7 ) is vulnerable to a remote attack affecting the GTP-U Receive Path component. The flaw exists in the ogs_pfcp_xact_local_create function within the src/upf/gtp-path.c file, where a manipulation can lead to an allocation of resources (CWE-770, CWE-400). ...

EUVD-2026-94411

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions a...