CVE-2026-76059

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...

CVE-2026-76059

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by a protection mechanism failure (CWE-693) in its static code security scanner. An attacker who can submit custom component source code can bypass the scanner by crafting an annotated class-body assignment that resolves to a dangerous c...

CVE-2026-76059 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...

CVE-2026-82772

creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:36+00:00| seen| https://jvn.jp/en/vu/JVNVU99009004...

CVE-2026-82764

creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:18+00:00| seen| https://jvn.jp/en/vu/JVNVU99009004 2026-09-10 08:46:17+00:00| seen| https://jvn.jp/en/vu/JVNVU96551518 2026-09-10 08:46:34+00:00| seen| https://jvn.jp/en/vu/JVNVU90314828...

CVE-2026-82794

creationtimestamp| type| source ---|---|--- 2026-09-10 08:45:10+00:00| seen| https://jvn.jp/en/vu/JVNVU97753461...

CVE-2026-87523

creationtimestamp| type| source ---|---|--- 2026-09-10 04:49:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:51+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

PT-2026-89610

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.5 Description A logic error in the static security scanner allows an attacker to bypass security checks by crafting an annotated class-body assignment. This technique uses alias tracking to resolve ...

CVE-2026-76059: Protection Mechanism Failure

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...

RLSA-2026:64809 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

SUSE CVE-2026-62437

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

AlmaLinux 9 : expat (ALSA-2026:64812)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64812 advisory. expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via...

CVE-2026-80087

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:32+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:02:26+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:56:42+00:00|...

CVE-2026-62437

A flaw was found in Xen. When a guest virtual machine is terminated, its device model DM can re-establish interrupt request IRQ tracking structures after the initial cleanup. This prevents some of these structures from being properly deallocated, leading to a memory leak. A local attacker with...

CVE-2026-67643

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350 2026-09-08 22:01:24+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:42+00:00| seen|...

CVE-2026-69768

creationtimestamp| type| source ---|---|--- 2026-09-08 20:11:18+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztf7v6232p 2026-09-08 20:19:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:08:13+00:00| seen|...

CVE-2026-82061

A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...

CVE-2026-82061

CVE-2026-82061 is a use-after-free vulnerability in MongoDB Server 's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, resulting in a server process crash (denial of ser...

EUVD-2026-72948

A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...

CVE-2026-82061 Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service

A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...