CVE-2026-8686

CVE-2026-8686 affects coreMQTT’s MQTT v5.0 property parser. The vulnerability is due to missing bounds validation in the parser prior to version 5.0.1, which may allow an MQTT broker to trigger a denial-of-service by sending a crafted packet. Affected component: coreMQTT (MQTT v5.0 property parsi...

Allocation of Resources Without Limits or Throttling

Overview @isaacs/brace-expansion is a Brace expansion as known from sh/bash Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unbounded brace range expansion. An attacker can cause excessive CPU and memory consumption, potentially...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to helm ( CVE-2025-32386, CVE-2025-32387 )

Summary Helm is used by IBM Cloud Pak for Data to build binaries in cpd-cli. Vulnerability Details CVEID:CVE-2025-32386 DESCRIPTION: Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g.,...

Linux Distros Unpatched Vulnerability : CVE-2020-36632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The...

UBUNTU-CVE-2020-36632

A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to initiate the atta...

PT-2022-9026 · Unknown · Hughsk Flat

Name of the Vulnerable Software and Affected Versions: hughsk flat versions up to 5.0.0 Description: A critical vulnerability was found in hughsk flat, affecting the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attribute...