CVE-2024-27630

CVE-2024–27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...

TencentOS Server 4: python-pyasn1 (TSSA-2026:1349)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1349 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

AZL-111539 CVE-2026-119197 affecting package python-pyasn1 0.4.8-3

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, ...

Allocation of Resources Without Limits or Throttling

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via RestWrite.prototype.checkInternalFields absent before the fix in...

CVE-2026-97370

The Junrar open-source Java RAR archive library is vulnerable to a CPU exhaustion flaw in versions prior to 7.6.1 . The root cause is located in RarVM.ExecuteCode within src/main/java/com/github/junrar/unpack/vm/RarVM.java, where a VM_JMP instruction can repeatedly execute if its target is greate...

EUVD-2026-102251

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

CVE-2026-97370 Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

CVE-2026-97370 Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

CVE-2026-97370: Loop with Unreachable Exit Condition

Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VMJMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP function returns success...

Junrar Resource Management Error Vulnerability

Versions of Junrar prior to 7.6.1 contained a resource management vulnerability. This vulnerability stems from the RarVMExecuteCode feature, which allows for the repeated execution of VMJMP instructions where the target is greater than or equal to the program’s codeSize. The setIP function return...

CVE-2026-107392

music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the returned promise and without first rejecting a chunk size smaller than the 12-byte chunk header. A crafted DSF input...

CVE-2026-107392 music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of CVE-2026-32256)

music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the returned promise and without first rejecting a chunk size smaller than the 12-byte chunk header. A crafted DSF input...

CVE-2026-107392

The music-metadata metadata parser (versions

CVE-2026-107392 music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of CVE-2026-32256)

music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the returned promise and without first rejecting a chunk size smaller than the 12-byte chunk header. A crafted DSF input...

CVE-2026-107387

The music-metadata metadata parser for audio and video files is vulnerable to uncontrolled memory allocation in the APEv2 parser prior to version 11.16.0 . The root cause is that the parser reads an attacker-controlled tag-item size and allocates a Uint8Array for a binary item before verifying if...

CVE-2026-107387 music-metadata: Uncontrolled memory allocation in APEv2 parser

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 parser reads an attacker-controlled tag-item size and allocates a Uint8Array for a binary item before proving that the declared item fits in the remaining tag or file data. A small crafted APE file ca...

CVE-2026-107387 music-metadata: Uncontrolled memory allocation in APEv2 parser

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 parser reads an attacker-controlled tag-item size and allocates a Uint8Array for a binary item before proving that the declared item fits in the remaining tag or file data. A small crafted APE file ca...

CVE-2026-87726

The NXP NXPNfcRdLib software (versions RC663 through 07.14.00_Pub ) contains a vulnerability in the phalFelica component due to insufficient API bounds checking . This flaw may allow an attacker with high privileges or an untrusted third party to access unintended memory regions, potentially resu...

CVE-2026-107392: Uncaught Exception

music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the returned promise and without first rejecting a chunk size smaller than the 12-byte chunk header. A crafted DSF input...

CVE-2026-107387: Memory Allocation with Excessive Size Value

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 parser reads an attacker-controlled tag-item size and allocates a Uint8Array for a binary item before proving that the declared item fits in the remaining tag or file data. A small crafted APE file ca...