CVE-2026-110196 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs...

CVE-2026-110196 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs...

CVE-2026-110196

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to bypass the administrator-only restriction and execute arbitrary code on the server by configuring a built-in code-execution component with attacker-supplied inputs...

EUVD-2026-113125

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-96198

A heap-based buffer overflow exists in Microsoft Edge (Chromium-based) , potentially allowing an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Versions prior to 155.0.4283.62 are identified as affected. A fix is available in version 155.0.4283.62 or later. While the...

EUVD-2026-113124

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-96199

A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is present in versions prior to 155.0.4283.62 , as indicated by associated security scanning data. While specific exploitation d...

CVE-2026-85897

A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The vulnerability has been observed in the wild, as noted in security bulletins. Versions prior to 155.0.4283.62 are identified as affected; remediation is available via...

EUVD-2026-113123

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-113122

Double free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-85890

A double free vulnerability exists in Microsoft Edge (Chromium-based) , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is present in versions prior to 155.0.4283.62 . While specific technical root causes or internal components are not...

OPENSUSE-SU-2026:22184-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-19654: imptcp regex-framing remote denial of service bsc1271910. - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - CVE-2026-78002: RainerScript replace heap buffer overflow...

OPENSUSE-SU-2026:22183-1 Security update for python-Brotli

This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service DoS due to a flaw in its brotli decompression bsc1252945. - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution bsc1287779. Update to 1.2.1: - decoder / encoder: added static...

Security Bulletin: IBM QRadar SIEM contains PHP components with known vulnerabilities

Summary IBM QRadar SIEM contains versions of PHP vulnerable to PHP2Shell vulnerabilities. This bulletin contains mitigations for QRadar SIEM systems. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handli...

CVE-2026-116723

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview agno is an Agno: a lightweight library for building Multi-Agent Systems Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via unsafe reflection in PandasTools, where model-controlled function names are...

brotli: Out-of-Bounds Write in Google Brotli Decoder

A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or...

Advisory ROSA-SA-2026-3326

Software: ruby4.0 OS: ROSA-CHROME Affected versions: = ruby4.0-4.0.9-2 Unaffected versions: ruby4.0-4.0.9-2 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS: Vulnerabili...

Advisory ROSA-SA-2026-3325

Software: Ruby OS: ROSA-CHROME Affected versions: = ruby-3.2.10-17 Affected versions: ruby-3.2.10-17 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS: Vulnerability has...

CVE-2026-119050

Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...