CVE-2026-106566

A flaw was found in ImageMagick. During the cleanup of temporary symbolic links symlinks used by delegate programs, the application fails to properly check the MAGICKSHREDPASSES environment variable. A local privileged user can exploit this vulnerability to overwrite files with random data,...

CVE-2026-106565

A flaw was found in ImageMagick. A remote attacker could trigger a Denial of Service DoS by providing a specially crafted bzip2-compressed image file. Due to a missing End-of-File EOF check during image decompression, the application can enter an infinite loop, exhausting system resources and...

CVE-2026-106564

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by providing a specially crafted OpenEXR EXR image file. Due to improper bounds checking in the EXR decoder, processing the image causes the application to write beyond the allocated memory buffer and crash...

CVE-2026-106562

A flaw was found in Backstage search backend plugins. In deployments configured with permission enforcement and backed by an Elasticsearch or OpenSearch service, search engine filtering fails to properly apply document denial policies. An authenticated user can exploit this issue during search...

CVE-2026-106561

A flaw was found in the Backstage Kubernetes backend plugin plugin-kubernetes-backend. An authenticated user with standard resource read permissions can retrieve sensitive values from Kubernetes queries that the plugin is designed to mask. This flaw allows information disclosure, potentially...

CVE-2026-106502

A flaw was found in the Backstage plugin-scaffolder-backend component. Under specific template and failure conditions, Scaffolder task failure events can expose sensitive backend-managed credentials. An authenticated user can exploit this vulnerability to retrieve credentials used during task...

CVE-2026-106504

A flaw was found in plugin-scaffolder-backend. An authenticated user with permissions to create and read scaffolder tasks can observe sensitive values in task logs when an execution step is denied by action permissions. This flaw allows an attacker to access sensitive input data, resulting in...

CVE-2026-106497

A flaw was found in Backstage's plugin-catalog-backend component. Inconsistent evaluation of catalog property permissions can lead to unauthorized information disclosure. In environments that rely on value-based permission rules to enforce access controls, an authenticated attacker can bypass...

CVE-2026-106461

A flaw was found in plugin-scaffolder-backend. An improper authorization flaw allows an authenticated user to view task metadata outside their intended permissions, resulting in unauthorized information disclosure. This vulnerability occurs during scaffolder task listing when deployment permissio...

CVE-2026-106456

A flaw was found in the Backstage plugin-proxy-backend package. When overlapping proxy paths are configured with different authentication requirements, access exemptions permitted on a parent route can improperly extend to nested routes that require credentials. A remote, unauthenticated attacker...

CVE-2026-106503

A flaw was found in the Backstage plugin-scaffolder-backend component. An authorization bypass allows an authenticated user with access to Scaffolder templates to circumvent configured action restrictions. By manipulating action inputs, an attacker can leverage integration credentials to gain...

CVE-2026-106442

A flaw was found in hydra-core. The instantiate mechanism does not properly validate callable targets against its blocklist, allowing execution wrappers and deferred calls to bypass authorization checks. An attacker who convinces an application or user to process untrusted configuration files can...

CVE-2026-106440

A flaw was found in hydra-optuna-sweeper. This vulnerability allows an attacker who controls sweep configuration settings or command-line overrides to achieve arbitrary code execution. The component dynamically resolves and invokes callable objects specified in user-controlled configuration paths...

CVE-2026-107212 Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relies on Rows.Next and Rows.Columns, but Rows.Columns consumes...

CVE-2026-107212 Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relies on Rows.Next and Rows.Columns, but Rows.Columns consumes...

EUVD-2026-94527

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relies on Rows.Next and Rows.Columns, but Rows.Columns consumes...

CVE-2026-107212

The Excelize Go language library (versions 2.1.0 to 2.11.0 ) is vulnerable to a denial-of-service condition due to an unbounded row number in the Rows.Columns function. The vulnerability exists because Rows.Columns fails to apply the limit check enforced by Rows.Next , allowing it to accept look-...

Security Bulletin: Multiple vulnerabilities addressed in IBM Db2 Recovery Expert for Linux, Unix and Windows

Summary There are multiple vulnerabilities fixed in IBM Db2 Recovery Expert for Linux, Unix and Windows v12.1. Details on the vulnerabilities fixed are given below. All platforms are affected, and all previous versions may also be affected. Vulnerability Details CVEID:CVE-2015-4852 DESCRIPTION: T...

CVE-2026-62252

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an admin account with the password sipcapture stored as a legacy SHA-256 hex hash. There is no first-login...

CVE-2026-62253

Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions JWTMiddleware and JWTMiddlewareV4 immediately return nextc when jwtSecret == "". The JWT secret defaults to an empty string. On a default installation, all protected API endpoints under...