Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion when failing to apply :preservecomments for a stylesheet containing a very large number of adjacent CSS comments. An attacker can cause a stack overflow and crash the application. Remediation Upgrade crass to...

libredwg:llvmfuzz: Heap-double-free in dxf_entities_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6631968138395648 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x7bb1585e02b0 Cra...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Detailed Report: https://oss-fuzz.com/testcase?key=4767688594096128 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

e107-comment-sqli-cve

CVE-2026-XXXXX Unauthenticated Blind SQL Injection in e107...

SUSE CVE-2026-53320

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject zero bdoblocknr in nilfsioctlmarkblocksdirty nilfsioctlmarkblocksdirty uses bdoblocknr to detect dead blocks by comparing it with the current block number bdblocknr. If they differ, the block is considered dead and...

PT-2026-56493

Name of the Vulnerable Software and Affected Versions node-tar versions prior to 7.5.19 Description Insufficient enforcement of hard upper bounds on total decompressed data, entry counts, or decompression ratio within extraction and parsing paths, such as src/extract.ts, allows a crafted gzip bom...

Linux Distros Unpatched Vulnerability : CVE-2026-53155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: use correct flags for device private PMD entry Commit 65edfda6f3f2 mm/rmap:...

Linux Distros Unpatched Vulnerability : CVE-2026-53145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix changehandle ioctl, attempt 4 airlied: just added some comments on how t...

Linux Distros Unpatched Vulnerability : CVE-2026-53320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: reject zero bdoblocknr in nilfsioctlmarkblocksdirty nilfsioctlmarkblocksdirty uses bdoblocknr to detect dead blocks by comparing it with the current blo...

libheif:sequence_fuzzer: Crash in unc_decoder_block_pixel_interleave::decode_tile

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5681594552352768 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: sequencefuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xee403000...

janet:fuzz_dobytes: Heap-use-after-free in janet_ev_default_threaded_callback

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=4676882919129088 Project: janet Fuzzing Engine: libFuzzer Fuzz Target: fuzzdobytes Job Type: libfuzzerasanjanet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x759f62a734...

libheif:sequence_fuzzer: Heap-buffer-overflow in unc_decoder_legacybase::processComponentSample

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4561896460845056 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: sequencefuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_dem_W64_fuzzer: Use-of-uninitialized-value in ff_adts_header_parse

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6429204661731328 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemW64fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

tidy-html5:tidy_general_fuzzer: Crash in tidy_general_fuzzer

Project: https://github.com/htacg/tidy-html5.git Detailed Report: https://oss-fuzz.com/testcase?key=6410685517725696 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidygeneralfuzzer Job Type: libfuzzerubsantidy-html5 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

binutils:fuzz_objdump: Index-out-of-bounds in print_insn_tic6x

Detailed Report: https://oss-fuzz.com/testcase?key=5617025893072896 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjdump Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: printinsntic6x disassemblesection...

wasm3:fuzzer: Global-buffer-overflow in CopyStackSlotsR

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5169294477164544 Project: wasm3 Fuzzing Engine: afl Fuzz Target: fuzzer Job Type: aflasanwasm3 Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x5ac6f62cf448 Crash State:...

boxmoe-dove-sqli-cve

CVE-2026-XXXXX Unauthenticated SQL Injection in Boxmoe Dov...

sakura-theme-sqli-cve

CVE-2026-XXXXX Unauthenticated SQL Injection in Sakura Wor...

sentinel

Sentinel — Agentic Code & System Quality Guardian Production-...

PT-2026-53077

Name of the Vulnerable Software and Affected Versions Frontend File Manager Plugin versions prior to 23.7 Description Authenticated users with Subscriber-level access can delete arbitrary files on the server, including sensitive files like wp-config.php, which may lead to a full site takeover. Th...