CGA-6W2H-7C9Q-3882

Bulletin has no description...

CGA-2CM3-GV5W-R78H

Bulletin has no description...

CVE-2026-117501

A flaw was found in HTTP::Body. By sending crafted chunked HTTP requests with malformed chunk sizes, a remote attacker can cause the parser to continuously buffer incoming data in memory. This issue leads to excessive memory consumption, resulting in a Denial of Service DoS for the affected...

CVE-2026-116531

A flaw was found in HTTP::Body. A remote attacker can cause a Denial of Service DoS or unexpected request processing by sending specially crafted chunked HTTP requests. This issue occurs because the module fails to properly track chunk boundaries when reading chunked request bodies. As a result,...

CVE-2026-116795

A flaw was found in re2js. When lookbehind assertions are enabled, repeated regular expression matching can cause the engine to repeatedly rescan input text from the beginning, leading to quadratic processing time. A remote attacker could supply crafted input to monopolize worker thread resources...

CVE-2026-116134

A flaw was found in perl-http-body. The multipart request parser does not restrict the size or number of lines within a part's header block before storing them in memory. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request with an excessively large multipa...

CVE-2026-116132

A flaw was found in HTTP::Body. A remote attacker could cause a Denial of Service DoS by sending repeated incomplete multipart upload requests. The multipart parser creates a temporary file when a file part begins but fails to track or clean it up if the upload terminates prematurely, allowing an...

CVE-2026-116285

A flaw was found in HTTP::Body. A remote attacker can cause a Denial of Service DoS through excessive CPU consumption by submitting specially crafted chunked HTTP requests. This issue occurs due to quadratic regular expression backtracking when the parser processes malformed chunk-size lines...

CVE-2026-116133

A flaw was found in HTTP::Body. A remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing missing or malformed multipart boundaries. Due to inefficient parsing, the component repeatedly rescans the buffered message body upon receiving each data chun...

CVE-2026-116131

A flaw was found in HTTP::Body. The module fails to limit the number of form fields or multipart parts processed in incoming request bodies. A remote attacker can exploit this vulnerability by sending a specially crafted request containing an excessive number of separators or file parts. This can...

CVE-2026-119118

Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to intercept crawls because Chromium always launches with --ignore-certificate-errors. Man-in-the-middle or DNS-controlling attackers can serve forged content to the crawler and read...

CVE-2026-118673

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output vector even though...

CVE-2026-118758

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...

CVE-2026-118758 Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...

CVE-2026-118758

Kubeflow Pipelines versions prior to 2.18.0 are vulnerable to an unauthenticated path traversal vulnerability in the volume artifact handler for GET /artifacts/get?source=volume. The root cause is a failure to confine caller-supplied file paths to the selected volume, allowing an attacker to read...

CVE-2026-118758 Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...

EUVD-2026-113214

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...

CVE-2026-118758 Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...

CVE-2026-117601

A flaw was found in electrum. A connected malicious server can exploit this vulnerability to cause theft of funds by replacing a legitimate transaction with a fraudulent transfer. Because the application fails to verify cryptographic signatures on unconfirmed transactions, the attacker can displa...

CVE-2026-118673 KeePassXC: Out-of-bounds write in browser integration response encryption with oversized database responses

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output vector even though...