90809 matches found
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version v12.1.1.3 Vulnerability Details CVEID:CVE-2026-59270 DESCRIPTION: Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all...
DEBIAN-CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
AZL-107129 CVE-2026-106435 affecting package python-pymongo 4.2.0-9
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
UBUNTU-CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +53 more potentially affected by CVE-2026-77050 via django (>=6.0.0a1, <=6.0.8)
django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-77050 Source advisory: SNYK:PYTHON-DJANGO-20825030...
arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +53 more potentially affected by CVE-2026-84429 via django (>=6.0.0a1, <=6.0.8)
django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-84429 Source advisory: SNYK:PYTHON-DJANGO-20825027...
arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +53 more potentially affected by CVE-2026-87890 via django (>=6.0.0a1, <=6.0.8)
django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-87890 Source advisory: SNYK:PYTHON-DJANGO-20825029...
arches (8.0.0a1), avaintegration-metapackage (>=6.0.4.3, <=6.0.8.45) +53 more potentially affected by CVE-2026-87975 via django (>=6.0.0a1, <=6.0.8)
django PYPI version =6.0.0a1, =6.0.4.3, =3.1.0, =2.0.0, =1.1.0, =1.2.1 and more Source cves: CVE-2026-87975 Source advisory: SNYK:PYTHON-DJANGO-20825028...
CVE-2026-106435 Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-106435 Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
EUVD-2026-95254
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-106435 Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
CVE-2026-106435
The MongoDB Python Driver contains an out-of-bounds read vulnerability in its binary accelerator. This occurs when an application decodes malformed BSON containing a truncated regular-expression element missing a trailing NUL byte. An attacker who can supply BSON to the decode or decode_all APIs ...
Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
music-metadata: Uncontrolled memory allocation in APEv2 parser
Summary music-metadata 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser. The parser reads the size of an APEv2 tag item from the input file and uses that value to allocate memory before checking whether the file actually contains that many bytes. A small crafted .ape fi...
GHSA-53V6-4H7P-P4GJ music-metadata: Uncontrolled memory allocation in APEv2 parser
Summary music-metadata 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser. The parser reads the size of an APEv2 tag item from the input file and uses that value to allocate memory before checking whether the file actually contains that many bytes. A small crafted .ape fi...