GHSA-57VP-FFX7-7GM6 vulnerabilities

Vulnerabilities for packages: dnsmasq...

GHSA-32PX-JFGQ-53XF vulnerabilities

Vulnerabilities for packages: dnsmasq...

GHSA-2QP9-XR4X-2CR9 vulnerabilities

Vulnerabilities for packages: dnsmasq...

CVE-2026-5172 vulnerabilities

Vulnerabilities for packages: dnsmasq...

CVE-2026-4891 vulnerabilities

Vulnerabilities for packages: dnsmasq...

GHSA-M62J-63MF-XR95 vulnerabilities

Vulnerabilities for packages: dnsmasq...

GHSA-4RRV-PMRH-2VC4 vulnerabilities

Vulnerabilities for packages: dnsmasq...

CVE-2026-4892 vulnerabilities

Vulnerabilities for packages: dnsmasq...

CVE-2026-4893 vulnerabilities

Vulnerabilities for packages: dnsmasq...

CVE-2026-4890 vulnerabilities

Vulnerabilities for packages: dnsmasq...

CVE-2026-2291 vulnerabilities

Vulnerabilities for packages: dnsmasq...

GHSA-HJXH-HMM9-WCMC vulnerabilities

Vulnerabilities for packages: dnsmasq...

php: NULL pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()

A flaw was found in PHP. When an attacker input can influence the encoding passed to mbregexencoding and the application subsequently uses mbregex search APIs, a NULL pointer dereference can occur due to a mismatch between the Oniguruma and mbfl encoding support. This issue can cause a crash in t...

CVE-2026-49942

Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One U+0661, or non-digits, which were ignored. This could allow network masks to accept larger networks. Leading zeros were also...

CVE-2026-49941

Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed back to itself as a 32-bit or 128-bit...

CVE-2026-49940

Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One U+0661 were accepted but not properly parsed as numbers. This could allow network masks to accept larger networks...

CVE-2026-40930

LIBPNG is a reference library for use in applications that process PNG Portable Network Graphics raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing...

CVE-2026-7774

tarfile.datafilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall to write files outside the...

CVE-2026-42876 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-WV26-88M5-6H59 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...