3296 matches found
CVE-2026-15337
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
EUVD-2026-52748
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
CLSA-2026-1785815205 TuxCare security update for org.springframework (24 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 24 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2...
CLSA-2026-1780879901 TuxCare security update for basic-ftp (2 CVEs)
TuxCare rebuilt basic-ftp to address 2 CVEs. Fixed in 5.0.5-tuxcare.1...
CLSA-2026-1780361390 TuxCare security update for diff (5 CVEs)
TuxCare rebuilt diff to address 5 CVEs. Fixed in 5.0.0-tuxcare.1...
CLSA-2026-1777509598 TuxCare security update for immutable (5 CVEs)
TuxCare rebuilt immutable to address 5 CVEs. Fixed in 5.0.3-tuxcare.1...
CLSA-2026-1775781159 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 3 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.3...
CLSA-2026-1777249675 TuxCare security update for 2 packages (4 CVEs)
TuxCare rebuilt 2 packages to address 4 CVEs. Fixed in 5.4.14-tuxcare.2...
CLSA-2026-1774225210 TuxCare security update for ssri (4 CVEs)
TuxCare rebuilt ssri to address 4 CVEs. Fixed in 5.3.0-tuxcare.1...
CLSA-2026-1773965919 TuxCare security update for cross-spawn (8 CVEs)
TuxCare rebuilt cross-spawn to address 8 CVEs. Fixed in 5.1.0-tuxcare.1...
CLSA-2026-1773101691 TuxCare security update for qs (8 CVEs)
TuxCare rebuilt qs to address 8 CVEs. Fixed in 5.1.0-tuxcare.1...
CLSA-2025-1766534902 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.27-tuxcare.2...
CVE-2026-67199
Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewReq message. Attackers can embed an arbitrarily large...
CVE-2026-69093
Admidio before 5.0.11 does not validate the admcsrftoken in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters delete and copy. An attacker can trick an authenticated administrator into visiting a crafted URL to delete ...
CVE-2026-9335
CVE-2026-9335 concerns keras-team/keras ≤ 3.14.0, where improper handling of HDF5 ExternalLinks in ExternalLink resolution allows arbitrary local HDF5 file content disclosure. The vulnerability arises because KerasFileEditor and keras.saving.load_weights bypass safe_get_h5_group and safe_get_h5_d...
CVE-2026-55825 Contao: Possible path traversal in job download URIs
Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can request an attachment identifier containing ../ segments and make the job attachment download endpoint read a file from another job directory inside var/job-attachments. The...
EUVD-2026-51596
Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end module passes configured RSS feed URLs from FeedReaderController::getResponse to feedIo-read without scheme or private-address validation, allowing a backend user with module-edit...
PT-2026-66745
Name of the Vulnerable Software and Affected Versions Apache HttpComponents Client versions 5.0-alpha1 through 5.6.2 Description HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager when it encounters an invalid or unsupport...