PT-2026-69685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the LoongArch BPF implementation within the bpf jit free function. When bpf int jit compile is called for subprograms, it may return early during the first pass,...

gitgalaxy — Updated!

GitGalaxy Docs · Visualizer 1 scan · 97 structural signals · 50+ languages · 0 need for compilation 19 risk exposure scores · 6 final reports · 0 dependencies · pip install gitgalaxy What Pain Point Does This Solve? GitGalaxy exists for one recurring problem: understanding a large, real,...

CVE-2026-71268

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

CVE-2026-71286 ember-dynamic-render-template Client-Side Template Injection via Unsanitized templateString

The render-template component of ember-dynamic-render-template addon/components/render-template.js passes its property directly into Ember/Glimmer's compileTemplate from @ember/template-compilation with no sanitization, allow-listing, or validation of the input...

CVE-2026-71286

The render-template component of ember-dynamic-render-template addon/components/render-template.js passes its property directly into Ember/Glimmer's compileTemplate from @ember/template-compilation with no sanitization, allow-listing, or validation of the input...

CVE-2026-71286 ember-dynamic-render-template Client-Side Template Injection via Unsanitized templateString

The render-template component of ember-dynamic-render-template addon/components/render-template.js passes its property directly into Ember/Glimmer's compileTemplate from @ember/template-compilation with no sanitization, allow-listing, or validation of the input...

CVE-2026-71286

The CVE-2026-71286 entry affects ember-dynamic-render-template’s render-template component, where addon/components/render-template.js forwards the templateString directly to Ember/Glimmer’s compileTemplate() without sanitization or validation. This enables client-side template injection, as attac...

EUVD-2026-53353

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses FILE:path content directives from uploaded Structured Text .st program files and writes the referenced content to os.path.join'./core', filepath with no validation that filepath stays within the ./core directory. A crafted ....

CVE-2026-71268

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

CVE-2026-71268

OpenPLC Runtime v3 is affected by a path traversal in compile_program() (webserver/openplc.py): it processes directives of the form (FILE:path content ) and writes to os.path.join('./core', file_path) without validating that file_path stays under ./core. A crafted ST file like (FILE:../../../etc/...

CVE-2026-71215: Improper Limitation of a Pathname to a Restricted Directory

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

PT-2026-68141

Name of the Vulnerable Software and Affected Versions OpenPLC Runtime version 3 Description The compile program function in webserver/openplc.py fails to validate the file path variable when parsing FILE:path content directives from uploaded Structured Text .st program files. This allows an...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Malware in hardhat-compile-ethers

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview hardhat-compile-ethers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2026-55990

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves the tail slots at the '0xdb' fill that libsodium's allocator writes...

EUVD-2026-47664

In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the destination buffer size. The size clamp that protects the UDP path is not applied on the TCP path, so a reply larger th...

EUVD-2026-47662

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic timestamps could trigger and result in server termination and thus denial of service. When interfacing with libngtcp2, for...

SindriKit v1.5.0

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...