RockyLinux 8 : glibc (RLSA-2026:76777)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76777 advisory. glibc: Process abort due to invalid memory in wordexp CVE-2026-6368 glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791...

Uncontrolled Recursion

Overview org.lz4:lz4-java is a Java port of the LZ4 compression algorithm and the xxHash hashing algorithm. Affected versions of this package are vulnerable to Uncontrolled Recursion in the refill function when processing LZ4 block streams with stopOnEmptyBlock set to false. An attacker can cause...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the refill function when processing LZ4 block streams with stopOnEmptyBlock set to false. An attacker can cause a thread to terminate unexpectedly by providing a stream with a large number of consecutive empty...

@otherdev-software/canvas (1.0.0), payload-stack (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-105860 via @payloadcms/plugin-multi-tenant (>=3.61.0, <=3.88.0)

@payloadcms/plugin-multi-tenant NPM version =3.61.0, =0.2.0, =0.3.0 Source cves: CVE-2026-105860 Source advisory: SNYK:JS-PAYLOADCMSPLUGINMULTITENANT-20936876...

@otherdev-software/canvas (1.0.0), payload-stack (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-105860 via @payloadcms/plugin-multi-tenant (>=3.61.0, <=3.88.0)

@payloadcms/plugin-multi-tenant NPM version =3.61.0, =0.2.0, =0.3.0 Source cves: CVE-2026-105860 Source advisory: GHSA-P96C-XWX8-3CQJ...

@otherdev-software/canvas (1.0.0), payload-stack (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-105860 via @payloadcms/plugin-multi-tenant (>=3.61.0, <=3.88.0)

@payloadcms/plugin-multi-tenant NPM version =3.61.0, =0.2.0, =0.3.0 Source cves: CVE-2026-105860 Source advisory: OSV:GHSA-P96C-XWX8-3CQJ...

@otherdev-software/canvas (1.0.0), payload-stack (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-105864 via @payloadcms/plugin-multi-tenant (>=3.61.0, <=3.88.0)

@payloadcms/plugin-multi-tenant NPM version =3.61.0, =0.2.0, =0.3.0 Source cves: CVE-2026-105864 Source advisory: OSV:GHSA-XHM9-GWGW-3Q2Q...

@otherdev-software/canvas (1.0.0), payload-stack (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-105864 via @payloadcms/plugin-multi-tenant (>=3.61.0, <=3.88.0)

@payloadcms/plugin-multi-tenant NPM version =3.61.0, =0.2.0, =0.3.0 Source cves: CVE-2026-105864 Source advisory: GHSA-XHM9-GWGW-3Q2Q...

@otherdev-software/canvas (1.0.0), payload-stack (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-105864 via @payloadcms/plugin-multi-tenant (>=3.61.0, <=3.88.0)

@payloadcms/plugin-multi-tenant NPM version =3.61.0, =0.2.0, =0.3.0 Source cves: CVE-2026-105864 Source advisory: SNYK:JS-PAYLOADCMSPLUGINMULTITENANT-20883332...

CLSA-2026-1791403476 Fix CVE(s): CVE-2026-94054, CVE-2026-94056

SECURITY UPDATE: out-of-bounds access in Proxy-Protocol v1 header parsing with an attacker-controlled proxy - debian/patches/CVE-2026-94054.patch: set ret to the length of the heap copy of the PROXY v1 line instead of adding the swallowuntilcrlf count, so the memchr for the CR stays inside the co...

CLSA-2026-1791401910 Fix CVE(s): CVE-2026-56154, CVE-2026-63292, CVE-2026-63686

SECURITY UPDATE: use-after-free of lookahead Vary value in modrewrite - debian/patches/CVE-2026-56154.patch: copy the Vary header name into r-pool before destroying the LA-U/LA-F lookahead sub-request in lookupvariable in modules/mappers/modrewrite.c. - CVE-2026-56154 SECURITY UPDATE: stack buffe...

CVE-2026-107216

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216

The Excelize Go library (versions 2.8.1 to 2.11.0 ) contains a vulnerability where ANCHORARRAY recursively calls the CalcCellValue function. This causes mutually-referencing dynamic-array formulas to recurse unboundedly because each recursive hop creates a fresh calculation context, bypassing in-...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-106572

A flaw was found in ImageMagick. A remote attacker can trigger a Denial of Service DoS by submitting a specially crafted Continuous Acquisition and Life-cycle Support CALS raster image for processing. Due to a missing recursion depth limit in the CALS decoder, parsing the malicious file exhausts...

MGASA-2026-0470 Updated tesseract packages fix security vulnerabilities

This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...

Updated tesseract packages fix security vulnerabilities

This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...