CVE-2026-73322

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the table named in the query's FROM clause. The lookup transform function identifies its dimension table with a string liter...

PT-2026-133747

Name of the Vulnerable Software and Affected Versions Apache Pinot versions prior to 1.6.0 Description An incorrect authorization issue exists in the single-stage query engine. When broker access control is enabled, the engine only authorizes the table specified in the FROM clause. Because the...

CLSA-2026-1792506479 TuxCare security update for @babel/plugin-transform-function-name (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-function-name to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792506480 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792506477 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792506478 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792506476 TuxCare security update for @babel/plugin-transform-function-name (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-function-name to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792506475 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

CLSA-2026-1792506472 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792506470 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

CLSA-2026-1792506469 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792506468 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CLSA-2026-1792506471 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the transform function of the C++ transport layer when ZLIB compression is enabled on outbound frames. An attacker can cause memory corruption, potentially leading to service instability, application crashes, data...

CVE-2026-17501

A flaw was found in llama.cpp. A remote attacker could exploit a vulnerability in the JSON-Schema-to-GBNF Conversion component, specifically within the transform function. This flaw allows for the manipulation of resource allocation, which can lead to a denial of service DoS by exhausting availab...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the transform function in the JSON-Schema-to-GBNF Conversion process. An attacker can cause excessive allocation of resources by submitting specially crafted input remotely...

CVE-2026-17501

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes uncontrolled recursion. The attack may be initiated remotely. The pull...

CVE-2026-17501 ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes uncontrolled recursion. The attack may be initiated remotely. The pull...

Malware in transform-function-bind

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-1567 Malicious code in transform-function-bind (npm)

The package 'transform-function-bind' is part of the PhantomRaven supply chain attack campaign Wave 3. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...