Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss (CVE-2026-41305)

Summary A Denial of Service vulnerability in the postcss CSS transformation parser CVE-2026-41305 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.5.23. Vulnerability Details CVEID:CVE-2026-41305 DESCRIPTION: PostCSS takes a CSS file and...

github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input

A flaw was found in Expr. This vulnerability allows excessive memory usage and potential out-of-memory OOM crashes via unbounded input strings, where a malicious or inadvertent large expression can cause the parser to construct an extremely large Abstract Syntax Tree AST, consuming excessive memo...

CVE-2024-52809

CVE-2024-52809 affects the Vue.js internationalization plugin vue-i18n . In affected versions, locale messages passed to createI18n or useI18n can cause the AST for locale messages to be generated in development mode, creating a potential Cross-site Scripting (XSS) risk. The issue is mitigated in...

CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...