Linux net/xfrm/xfrm_policy.c Heap Buffer Overflow DoS

The vulnerability of the xfrmlookupwithifid function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

EUVD-2026-17435

OpenClaw: Google Chat and Zalouser group sender allowlist bypass via policy downgrade...

Important: ecs-service-connect-agent

Issue Overview: Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC Role-Based Access Control filter contains a logic vulnerability in how it validates HTTP headers when multiple values are present for the same header name. Instead o...

CVE-2026-34574

Parse Server vulnerability CVE-2026-34574 affects Parse Server prior to 8.6.69 and 9.7.0-alpha.14. An authenticated user can bypass the immutability guard on session fields (expiresAt, createdWith) by sending a null value in a PUT to the session update endpoint, effectively nullifying session exp...

akita-ai (0.1.0), chat-with-mlx (>=0.1.0, <=0.1.5) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.1.26)

langchain-core PYPI version 0.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - akita-ai 0.1.0 - chat-with-mlx =0.1.0, =0.0.1, =0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

chat-with-mlx (>=0.2.0, <=0.2.2), ragstack-ai-langchain (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-34070 via langchain-core (0.1.45)

langchain-core PYPI version 0.1.45 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chat-with-mlx =0.2.0, =1.0.0, =1.0.1 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

CVE-2026-5030

A vulnerability has been found in Totolink NR1800X 9.1.0u.6279B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument hosttime leads to command injection. The attack can be initiated remotely. Th...

CVE-2026-1307: Exposure of Sensitive Information to an Unauthorized Actor

The Ninja Forms - The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.1 via a callback function for the adminenqueuescripts action handler in blocks/bootstrap.php. This makes it possible for...

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

Impact When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS. This backtracking vulnerability requires the second wildcard to be somewhere other than the end of the path. Unsafe examples: /foo-bar-:baz /a-:b-c-:d...

akita-ai (0.1.0), chat-with-mlx (>=0.1.0, <=0.1.5) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.1.26)

langchain-core PYPI version 0.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - akita-ai 0.1.0 - chat-with-mlx =0.1.0, =0.0.1, =0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...

chat-with-mlx (>=0.2.0, <=0.2.2), ragstack-ai-langchain (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-34070 via langchain-core (0.1.45)

langchain-core PYPI version 0.1.45 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chat-with-mlx =0.2.0, =1.0.0, =1.0.1 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...

CVE-2026-4963

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...

CVE-2026-32913

OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects. Attackers can trigger redirects to different origins to intercept sensitive headers like X-Api-Key and Private-Token intend...

CVE-2026-23636: Unrestricted Upload of File with Dangerous Type

Kiteworks is a private data network PDN. In Kiteworks Secure Data Forms prior to version 9.2.1, the manager of a form could potentially exploit an Unrestricted Upload of File with Dangerous Type due to a missing validation. Upgrade Kiteworks to version 9.2.1 or later to receive a patch...

CVE-2026-32498: Missing Authorization

Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through = 6.0.7.6...

CVE-2026-27095: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Object Injection.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through = 5.6.0...

CVE-2026-24373: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This issue affects RegistrationMagic: from n/a through = 6.0.7.1...

CVE-2026-25456: Missing Authorization

Missing Authorization vulnerability in Aarsiv Groups Automated FedEx live/manual rates with shipping labels a2z-fedex-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automated FedEx live/manual rates with shipping labels: from n/a through = 5.1....

Parse Server's Session Update endpoint allows overwriting server-generated session fields

Impact An authenticated user can overwrite server-generated session fields such as expiresAt and createdWith when updating their own session via the REST API. This allows bypassing the server's configured session lifetime policy, making a session effectively permanent. Patches The fix blocks...

Incorrect Authorization

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Incorrect Authorization via session fields such as expiresAt and createdWith. An authenticated user can modify...