CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

CVE-2026-61372

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...

CVE-2026-18651

A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked, the bind is reported as failed to the client, but the already-installed...

p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...

CVE-2026-47010 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-QW6J-RCFR-8VRX vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-HHF8-3X8G-6PFF vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-46968 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-FHJM-G79R-VV57 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47021 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-HHF8-3X8G-6PFF vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47010 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-47021 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-FHJM-G79R-VV57 vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2026-46968 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-QW6J-RCFR-8VRX vulnerabilities

Vulnerabilities for packages: openjdk...

p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...

gawk: gawk: Memory corruption via integer overflow

A flaw was found in gawk. An integer overflow vulnerability could allow a local attacker to cause memory exhaustion, leading to a denial of service. This flaw may also enable an attacker to corrupt gawk's internal memory, potentially leading to system instability...

firefox: thunderbird: Privilege escalation in the DOM: Content Processes component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Content Processes component...