CVE-2026-86428

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

CVE-2026-86433

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks t...

CVE-2026-86428

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...

CVE-2026-79266 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-79238 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-79088 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-55GR-F7M4-MRQX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-859R-QGH9-2MWV vulnerabilities

Vulnerabilities for packages: chromium...

K000163211: Linux kernel vulnerability CVE-2025-68349

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFSINOLAYOUTCOMMIT in pnfsmarklayoutstateidinvalid Fixes a crash when layout is null during this call stack: writeinode - nfs4writeinode - pnfslayoutcommitinode pnfssetlayoutcommit...

NPM: toml-node: Uncontrolled Recursion

NPM: toml-node: Uncontrolled Recursion vulnerability discovered by ? in WordPress Npm toml versions 4.2.0...

@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-77465 via toml (>=4.1.1, <=4.1.2)

toml NPM version =4.1.1, =0.1.0, =3.0.0, =2.7.0, =2.12.4 Source cves: CVE-2026-77465 Source advisory: OSV:GHSA-82X6-Q7MM-W9CF...

@agiflowai/aicode-toolkit (>=1.2.0, <=1.3.0), @agiflowai/one-mcp (>=0.4.1, <=0.4.2) +30 more potentially affected by CVE-2026-61556 via liquidjs (>=10.26.0, <=10.27.0)

liquidjs NPM version =10.26.0, =1.2.0, =0.4.1, =1.2.0, =1.1.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =36.0.0-rc.0, =0.0.1-beta.0, =3.0.0, =0.5.0, =0.3024.0, =0.3024.0, =1.1.1 and more Source cves: CVE-2026-61556 Source advisory: OSV:GHSA-M7FP-H3P4-HR49...

CVE-2026-84757

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

BELL-CVE-2026-80713 CVE-2026-80713 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80697 CVE-2026-80697 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80690 CVE-2026-80690 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80699 CVE-2026-80699 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80682 CVE-2026-80682 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80672 CVE-2026-80672 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-80656 CVE-2026-80656 does not affect BellSoft software

Bulletin has no description...