GHSA-F2FF-P2WW-7P4P sqlparse: Quadratic O(n²) DoS in group_comments

Summary A comment-only statement -- c\nn may cause a Denial of Service DoS. Details Location: sqlparse/engine/grouping.py:331-341 groupcomments, invoked first in group at grouping.py:439. Reachable via sqlparse.parse and sqlparse.formatsql, stripcomments=True. A statement made of many single-line...

CVE-2026-71491

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, groupcomments in sqlparse/engine/grouping.py repeatedly rescans comment-only statements before the MAXGROUPINGTOKENS guard, causing quadratic CPU consumption through sqlparse.parse and sqlparse.formatsql, stripcomments=Tru...

UBUNTU-CVE-2026-74492

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap a...

CVE-2026-74492

The CVE-2026-74492 entry concerns the Linux kernel netfilter ipset subsystem. Technical description across official and vendor advisories shows that during resize operations, mtype_resize() copies only comment pointers, while the old table is published for packet-side updates before the replaceme...

CVE-2026-74492

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap a...

CVE-2026-74492 netfilter: ipset: do not update comments from kernel-side hash adds

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap a...

CVE-2026-72435 netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfreercu and rcuassignpointer Sashiko pointed out that kfreercu was called before rcuassignpointer in handling the comment extension. Fix the order so that rcuassignpointer called first...

CVE-2026-72435

The CVE-2026-72435 entry concerns a Linux kernel netfilter/ipset issue where kfree_rcu() was invoked before rcu_assign_pointer() when handling the comment extension. The affected component is the Linux kernel's netfilter/ipset path; the root cause is an incorrect destruction/association order of ...

EUVD-2026-59334

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfreercu and rcuassignpointer Sashiko pointed out that kfreercu was called before rcuassignpointer in handling the comment extension. Fix the order so that rcuassignpointer called first...

PT-2026-72944

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype resize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap...

CVE-2026-19845

CVE-2026-19845 affects TOTOLINK A800R firmware 4.1.2cu.5137_B20200730, via the LAN service component lan.so (file /cgi-bin/cstecgi.cgi). The vulnerability is in function setStaticDhcpConfig; manipulation of the Comment argument can cause a stack-based buffer overflow, and remote exploitation is p...

WordPress W3 Total Cache plugin <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name vulnerability

Unauthenticated Stored Cross-Site Scripting via Comment Author Name vulnerability discovered by daroo in WordPress Plugin W3 Total Cache versions = 2.10.3...

CVE-2026-19813

A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. The attack may be performe...

EUVD-2026-58599

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

CVE-2026-18109

The CVE-2026-18109 entry concerns the W3 Total Cache WordPress plugin. A Stored Cross-Site Scripting vulnerability exists in all versions up to and including 2.10.3 due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts that execute when u...

CVE-2026-18109 W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

EUVD-2026-58570

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

CVE-2026-49096 Uncaught Exception in Kibana Cases Leading to Denial of Service

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

CVE-2026-57886

Cross-repository issue/comment attachment re-linking can expose private attachment content...

CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...