kin-openapi Validation Handler Bypass

The vulnerability of the openapi3filter.ValidationHandler.Middleware function in the kin-openapi library relates to bypassing authentication using an alternative path when processing the UseEncodedPath parameter. Exploiting this vulnerability could allow a malicious actor to circumvent existing...

kin-openapi UrlencodedBodyDecoder DoS

The vulnerability of the UrlencodedBodyDecoder component in the kin-openapi library relates to bypassing authentication using an alternative name. Exploiting this vulnerability could allow a malicious actor to cause service failures...

FreeRDP RDP Channel Process Failure

The vulnerability of the freerdpchannelprocess function in the RDP client FreeRDP is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Mongoose Heap Buffer Overflow DoS

The vulnerability of the mgtlsrecvrecord function in the Mongoose library is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

VeraCrypt Driver Unauthorized Access

The vulnerability of the VeraCrypt driver veracrypt.sys for Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

cpp-httplib create_redirect_client Unauthorized Access

The vulnerability of the createredirectclient function in the cpp-httplib library is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

libdfxfw Heap Buffer Overflow DoS

The vulnerability of the dwgReader18::readFileHeader function in the libdfxfw library of the LibreCad automated design system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

FreeRDP Smartcard Bypass ASLR

The vulnerability of the smartcardLocateCardsByATRACall function in the RDP client FreeRDP involves reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to bypass the ASLR protection mechanism...

FreeRDP RDP Server Replacement

The vulnerability of the freerdphttprequest function in the RDP client FreeRDP is related to errors in the certificate authentication process. Exploiting this vulnerability could allow a malicious actor to replace the RDP server remotely...

PT-2026-120339

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8 and RouterLink directives are rendered with queryParamsHandling: 'merge' or 'preserve', configured either per link or globally via defaultQueryParamsHandling. Starting i...

PT-2026-120340

An incomplete fix for GHSA-58c5-g7wp-6w37 CVE-2025-66035 in @angular/common's HTTP Client HttpClient allows Cross-Site Request Forgery XSRF tokens to be leaked to attacker-controlled cross-origin domains when requests use URLs that exploit parsing discrepancies between regular expressions and the...

PT-2026-120151

Name of the Vulnerable Software and Affected Versions @modelcontextprotocol/server versions 2.0.0 through 2.2.0 Description An MCP server accessed over HTTP may deliver responses and notifications from one client to another. This occurs when clients share a single stateless transport, McpServer...

PT-2026-118576

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8. During route recognition, @angular/router fails to validate whether an auxiliary outlet segment in the URL matches a route configured for that specific outlet name...

Linux Distros Unpatched Vulnerability : CVE-2026-98504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: ofproperty: Omit bus properties without a subordinate bus A bridge a device with a Type 1 header may not have a secondary bus allocated pdev-subordinate,...

Linux Distros Unpatched Vulnerability : CVE-2026-98627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Preserve packet pointer class displacement in regsafe regsafe maps packet pointer IDs between states and checks that each current register range is a subse...

Linux Distros Unpatched Vulnerability : CVE-2026-98542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgroup/cpuset: Return PERRNOCPUS in remotepartitionenable on subpartitionscpus conflict When a remote partition is created underneath an existing local partitio...

Alibaba Cloud Linux 3 : 0315: osbuild-composer (ALINUX3-SA-2026:0315)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0315 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-25681: Parsing arbitrary HTML whi...

PT-2026-118427

Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, applications using custom middleware are vulnerable when they pass an unchanged browser request URL to server.transformIndexHtml. getHtmlFilename uses the query-bearing request URL to resolve an...

Security update for coredns (important)

openSUSE security update: security update for coredns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22135-1 Rating: important References: bsc1279216 Cross-References: CVE-2026-84304 CVSS scores: CVE-2026-84304 SUSE : 7.5...

Security update for gitoxide (moderate)

openSUSE security update: security update for gitoxide ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22126-1 Rating: moderate References: bsc1281749 Cross-References: CVE-2026-91986 CVSS scores: CVE-2026-91986 SUSE : 5.4...