@otherdev-software/canvas (1.0.0), payload-stack (>=0.2.0, <=0.3.0) potentially affected by CVE-2026-105860 via @payloadcms/plugin-multi-tenant (>=3.61.0, <=3.88.0)

@payloadcms/plugin-multi-tenant NPM version =3.61.0, =0.2.0, =0.3.0 Source cves: CVE-2026-105860 Source advisory: MEND:CVE-2026-105860...

MGASA-2026-0469 Updated srt package fixes security vulnerabilities

Encryption State Machine Downgrade. CVE-2026-55868 KMREQ/KMRSP Stack-Based Buffer Overflow. CVE-2026-55869...

Updated srt package fixes security vulnerabilities

Encryption State Machine Downgrade. CVE-2026-55868 KMREQ/KMRSP Stack-Based Buffer Overflow. CVE-2026-55869...

CLSA-2026-1791302296 Fix CVE(s): CVE-2026-63387

SECURITY UPDATE: off-by-one stack overflow in dnsnametolabels - debian/patches/CVE-2026-63387.patch: fail instead of writing the terminating zero label past the end of the buffer in evdns.c - CVE-2026-63387...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms including gdb-headless, gdb, binutils-gold, binutils, cpp, gcc, gcc-gdb-plugin, libgcc, libgomp, libstdc++, python-unversioned-command, platform-python, python3,...

GHSA-4V7V-GQF9-WW2G Vyper: Call stack corruption when passing complex type containing non-base type members as argument

Impact When we pass a multi-dimensional array like 1, 2, 3, 4 as an argument to internal/external functions we get incorrect output. This is due to a stack management issue, because it was assumed that the size of each subtype of an array/struct is 32, which is not always correct. Example code:...

Vyper: Call stack corruption when passing complex type containing non-base type members as argument

Impact When we pass a multi-dimensional array like 1, 2, 3, 4 as an argument to internal/external functions we get incorrect output. This is due to a stack management issue, because it was assumed that the size of each subtype of an array/struct is 32, which is not always correct. Example code:...

Always-Incorrect Control Flow Implementation

Overview vyper is a Pythonic Smart Contract Language for the EVM. Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation in makereturnstmt in vyper/codegen/return.py when a return statement is executed inside a for loop, the loop's values are not popped...

CLSA-2026-1786447704 php: Fix of 4 CVEs

CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug 69720 NULL pointer dereference in phargetfpoffset, without which the fix only relocates the crash - CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...'...

CLSA-2026-1786447403 php: Fix of 4 CVEs

CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug 69720 NULL pointer dereference in phargetfpoffset, without which the fix only relocates the crash - CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...'...

linux-kernel-codex-harness

Kernel Codex Harness 한국어 | English Strumento di Ricerca · Importazione Originale: 3 Aprile 2026 · Revisione Documentazione: 11 Luglio 2026 Filosofia Fondamentale — Segnale Esterno Lascia che osservazioni riproducibili al di fuori dell'inferenza del modello guidino l'attenzione; non scambiare mai ...

CLSA-2026-1791294114 ghostscript: Fix of 2 CVEs

CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 output adapter when components are subsampled below 8 bits per sample - CVE-2026-103226: bound the control stack in the Type 1 to Type 2 font conversion used by pdfwrite - CVE-2025-27830: count every $Blend procedure entry in the length...

BIT-APACHE-2026-63292 Apache HTTP Server: mod_vhost_alias stack overflow

Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...

CLSA-2026-1789464832 git-lfs: Fix of 5 CVEs

rebuild with golang 1.25.7-1.el96.tuxcare.els16 to fix Go standard library CVEs - CVE-2026-33818: enforce a maximum recursion depth in encoding/asn1 Unmarshal to prevent stack exhaustion when parsing deeply-nested recursive structures - CVE-2026-56860: avoid quadratic complexity in net/url...

CLSA-2026-1791279538 delve: Fix of 5 CVEs

Rebuild with golang 1.25.7-1.el96.tuxcare.els16 to fix the following CVEs - CVE-2026-33818: enforce a maximum recursion depth in encoding/asn1 Unmarshal to prevent stack exhaustion on deeply nested structures - CVE-2026-56859: add a recursion depth guard in encoding/xml so that DecodeElement no...

DEBIAN-CVE-2026-98372

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfsskbresetfragwalk iptfsskbresetfragwalk advances to the fragment containing @offset with an unbounded loop: while offset = walk-past + walk-fragswalk-fragi.len walk-past +=...

CVE-2026-98372

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfsskbresetfragwalk iptfsskbresetfragwalk advances to the fragment containing @offset with an unbounded loop: while offset = walk-past + walk-fragswalk-fragi.len walk-past +=...

CVE-2026-98350

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: pass PMKID to firmware if present Zero out authstatus on initialization. Otherwise, garbage will leak from the stack to the firmware when ssid is less than 32 bytes and/or when params-pmkid is set. Then, pass...

DEBIAN-CVE-2026-98350

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: pass PMKID to firmware if present Zero out authstatus on initialization. Otherwise, garbage will leak from the stack to the firmware when ssid is less than 32 bytes and/or when params-pmkid is set. Then, pass...

CVE-2026-98232

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsicdlenable scsicdlenable uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byte stack buffer. A target can report a total length shorter than its...