1447386 matches found
GHSA-38XV-HF3P-H7MQ
creationtimestamp| type| source ---|---|--- 2026-09-11 11:32:31+00:00| seen| https://gist.github.com/alon710/31db43b5866ca861d12e36661fc88337...
EUVD-2026-76071
Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the default security.exec.allow list — requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...
CLSA-2026-1789123062 TuxCare security update for flask-cors (3 CVEs)
TuxCare rebuilt flask-cors to address 3 CVEs. Fixed in 5.0.1.post1+tuxcare...
ROOT-OS-DEBIAN-12-CVE-2026-32738 CVE-2026-32738 in libheif - Patched by Root
Root has patched CVE-2026-32738 in the libheif package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-32814 CVE-2026-32814 in libheif - Patched by Root
Root has patched CVE-2026-32814 in the libheif package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-32740 CVE-2026-32740 in libheif - Patched by Root
Root has patched CVE-2026-32740 in the libheif package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-32741 CVE-2026-32741 in libheif - Patched by Root
Root has patched CVE-2026-32741 in the libheif package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-48779 CVE-2026-48779 in ws - Patched by Root
Root has patched CVE-2026-48779 in the ws package for Root:npm. Multiple fixed versions available...
CVE-2026-87654
A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...
CVE-2026-87621
A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...
CVE-2026-87613
A flaw was found in Chromium Extensions. A remote attacker could exploit an incorrect reference resolution vulnerability by sending crafted network traffic. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...
CLSA-2026-1789122433 TuxCare security update for django (4 CVEs)
TuxCare rebuilt django to address 4 CVEs. Fixed in 4.0.post18+tuxcare...
CVE-2026-87527
A flaw was found in the WebGL component of Chromium-based browsers. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be triggered by a specially crafted HTML page, potentially leading to a complete compromise...
CVE-2026-87492
A flaw was found in DevTools in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to potentially execute arbitrary code outside the browser's security sandbox. The exploitation occurs when a user interacts with a specially crafted HTML page, leading to a severe...
CVE-2026-87488
A flaw was found in chromium-browser. A use-after-free vulnerability in WebGL, a web graphics library, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation can occur by enticing a user to visit a specially crafted HTML page...
CVE-2026-87474
A flaw was found in Google Chrome. A use-after-free vulnerability in the Payments component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by enticing a user to visit a specially crafted HTML page...
CVE-2026-87470
A flaw was found in Google Chrome. Improper quantity validation in the Tint component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. Successful...
ROOT-OS-DEBIAN-11-CVE-2026-0864 CVE-2026-0864 in python3.9 - Patched by Root
Root has patched CVE-2026-0864 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...