5641 matches found
CVE-2026-86422
ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...
CVE-2026-86435
commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers can craft documents with duplicate footnote definitions and references to create quadratic output expansion, consuming excessiv...
CVE-2026-86433
commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks t...
CVE-2026-86428
commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...
SUSE CVE-2026-84446
libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::initsampletimingtable compute a logical mnumoutputsamples value that exceeds the uint32t counters used by TrackVisual::decodenextimagesample and...
SUSE CVE-2026-84447
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processedids is copied per branch and ImageItem::decodeimage has no shared operation budget. This vulnerability is fix...
GHSA-P498-V437-472G vulnerabilities
Vulnerabilities for packages: langfuse, tileserver-gl, vitess...
CVE-2026-45820 vulnerabilities
Vulnerabilities for packages: lambda-nodejs, langfuse-fips, langfuse, tileserver-gl, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, tileserver-gl-fips, librechat...
GHSA-FM8W-2M5W-9J7R vulnerabilities
Vulnerabilities for packages: kubescape, kubescape-server, kubescape-server-fips, cilium...
CVE-2026-84124 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-8V78-CGM6-V8H8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-QGW4-JQW6-383Q vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-3H3X-M88J-VRHJ vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-9Q9X-3H5P-QV27 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-84QV-4WJ5-WWMM vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-84120 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-84130 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-84137 vulnerabilities
Vulnerabilities for packages: firefox...