CVE-2026-82605

CVE-2026-82605 affects BareBones BBEdit versions up to 15.5.5 , specifically the Lasso Language Tokenizer component. The vulnerability causes an infinite loop when processing crafted Lasso language input, leading to a denial-of-service condition. The attack can be executed remotely but requires u...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

CVE-2026-82579

CVE-2026-82579 is an infinite loop vulnerability in the ash_ai Elixir/Erlang library (versions 0.6.0 through before 1.0.0 ), affecting the AshAi.ToolLoop component. When all tool calls are filtered out—either due to a missing valid name or a reused tool_call_id—the loop recurses with a byte-ident...

EEF-CVE-2026-82579 AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

Summary Loop with Unreachable Exit Condition Infinite Loop vulnerability in ash-project ashai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests. AshAi.ToolLoop classifies a model response of :toolcalls, then filters the calls...

CVE-2026-82579 AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

Loop with Unreachable Exit Condition Infinite Loop vulnerability in ash-project ashai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests. AshAi.ToolLoop classifies a model response of :toolcalls, then filters the calls through...

CVE-2026-82579 AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

Loop with Unreachable Exit Condition Infinite Loop vulnerability in ash-project ashai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests. AshAi.ToolLoop classifies a model response of :toolcalls, then filters the calls through...

USN-8689-1: OpenJDK 26 vulnerabilities

It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 26 did not correctly authorize users. A remote attack...

USN-8689-1 openjdk-26 vulnerabilities

It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 26 did not correctly authorize users. A remote attack...

EUVD-2026-68292

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument...

The vulnerability of the functions dcache_init_early() and dcache_init() in the fs/dcache.c module of the Linux kernel’s file system allows a attacker to access protected information or cause service failures.

The vulnerability of the functions dcacheinitearly and dcacheinit in the fs/dcache.c module of the Linux kernel’s file system is related to a cyclic shift. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

RockyLinux 9 : nodejs:22 (RLSA-2026:61383)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61383 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

Linux Distros Unpatched Vulnerability : CVE-2026-38349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via...

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2026-2117)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2117 advisory. TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19694 Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19695 C12.22...

Linux Distros Unpatched Vulnerability : CVE-2022-50998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free...

Linux Distros Unpatched Vulnerability : CVE-2026-5079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data. The...

ROS-20260831-73-0013

The vulnerability in golang-x-image is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-064 (ALASFIREFOX-2026-064)

The version of firefox installed on the remote host is prior to 140.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-064 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the...

Debian dla-4765 : expat - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4765 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4765-1 [email protected]...

RHEL 10 : freerdp (RHSA-2026:61378)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61378 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...