OpenFlow v5 Protocol Analyzer DoS

The vulnerability of the OpenFlow v5 protocol analyzer used by Wireshark for analyzing computer network traffic involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark DoS

The vulnerability of the TLS protocol analyzer and the network traffic analyzer in Wireshark relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a attacker to cause a service failure...

ContraFix: Agentic Vulnerability Repair Via Differential Runtime Evidence and Skill Reuse

Large language model LLM agents are increasingly used for automated vulnerability repair AVR, where repository-level reasoning enables them to inspect context and produce source-code patches. However, recent empirical results show that these agents still struggle with real-world vulnerabilities...

3d-box (>=0.0.3, <=0.0.7), @500tech/react-scripts (>=1.1.3-beta.1, <=5.1.0) +1061 more potentially affected by unknown CVE via webpack-bundle-analyzer (>=1.4.1, <=3.2.0)

webpack-bundle-analyzer NPM version =1.4.1, =0.0.3, =1.1.3-beta.1, =1.0.0, =1.0.0, =0.9.0, =0.0.1-canary.49, =1.0.0, =0.0.1, =1.0.1-0, =2.1.0-alpha.83be2ea7, =2.1.2-4, =1.0.1-0, =0.0.7, =0.0.28 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0058...

WS-2019-0058

Versions of webpack-bundle-analyzer prior to 3.3.2 are vulnerable to Cross-Site Scripting. The package uses JSON.stringify without properly escaping input which may lead to Cross-Site Scripting...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.95.0-5.hum1 aarch64, x8664 clippy-1.95.0-5.hum1 aarch64, x8664 rust-1.95.0-5.hum1 aarch64, x8664 rust-analyzer-1.95.0-5.hum1 aarch64, x8664 rust-debugger-common-1.95.0-5.hum1 noarch...

change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31238 via ludwig (>=0.1.1, <=0.5.5)

ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31238 Source advisory: SNYK:PYTHON-LUDWIG-16757931...

change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31238 via ludwig (>=0.1.1, <=0.5.5)

ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31238 Source advisory: GHSA-XP5Q-5Q7G-Q26R...

change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31238 via ludwig (>=0.1.1, <=0.5.5)

ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31238 Source advisory: OSV:GHSA-XP5Q-5Q7G-Q26R...

change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31237 via ludwig (>=0.1.1, <=0.5.5)

ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31237 Source advisory: GHSA-WCR3-GM9F-F87Q...

change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=1.0.7, <=1.3.1) potentially affected by CVE-2026-31237 via ludwig (>=0.1.1, <=0.5.5)

ludwig PYPI version =0.1.1, =0.14.0, =1.0.7, =1.3.1 Source cves: CVE-2026-31237 Source advisory: OSV:GHSA-WCR3-GM9F-F87Q...

CVE-2026-43358

In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in tryreleasesubpageextentbuffer Call rcureadlock before exiting the loop in tryreleasesubpageextentbuffer because there is a rcureadunlock call past the loop. This has been detected by...

CVE-2026-43358: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in tryreleasesubpageextentbuffer Call rcureadlock before exiting the loop in tryreleasesubpageextentbuffer because there is a rcureadunlock call past the loop. This has been detected by...

GNW Protocol Analyzer DoS

The vulnerability of the GNW protocol analyzer, a component of the Wireshark computer network traffic analyzer, lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark DLMS/COSEM DoS

The vulnerability of the DLMS/COSEM protocol implementation in the Wireshark network traffic analyzer involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

WebSocket Protocol Analyzer DoS

The vulnerability of the WebSocket protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

Wireshark ICMPv6 Protocol Analyzer Heap Buffer Overflow DoS

The vulnerability of the dissecticmpv6ndopt function in the ICMPv6 protocol analyzer for computer network traffic analysis tool Wireshark is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause service interruptions...

Kismet Packet-Kismet DoS

The vulnerability in the packet-kismet.c script of the Kismet protocol, a traffic analyzer for computer networks developed by Wireshark, involves allowing the operation to escape out of the buffer and into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

SMB2 Protocol SMB2 DoS

The vulnerability of SMB2 protocol analyzer in Wireshark is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

SANE Protocol Disruption

The vulnerability of the dissectcontroloptionvalue function in the SANE protocol analyzer, Wireshark, for analyzing computer network traffic, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...