com.powsybl:powsybl-action-simulator (4.2.0-rc1), com.powsybl:powsybl-action-util (4.2.0-rc1) +20 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.2.0-rc1)

com.powsybl:powsybl-computation-local MAVEN version 4.2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-simulator 4.2.0-rc1 - com.powsybl:powsybl-action-util...

com.powsybl:powsybl-action-simulator (4.5.0), com.powsybl:powsybl-action-util (4.5.0) +37 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.5.0)

com.powsybl:powsybl-computation-local MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-simulator 4.5.0 - com.powsybl:powsybl-action-util 4.5.0 -...

com.powsybl:powsybl-action-dsl (6.0.3), com.powsybl:powsybl-action-dsl-spi (6.0.3) +43 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (6.0.3)

com.powsybl:powsybl-computation-local MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 6.0.3 - com.powsybl:powsybl-action-dsl-spi 6.0.3 -...

com.powsybl:powsybl-action-simulator (4.3.0-rc1), com.powsybl:powsybl-action-util (4.3.0-rc1) +21 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.3.0-rc1)

com.powsybl:powsybl-computation-local MAVEN version 4.3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-simulator 4.3.0-rc1 - com.powsybl:powsybl-action-util...

com.powsybl:powsybl-action-simulator (3.3.0), com.powsybl:powsybl-action-util (3.3.0) +28 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (3.3.0)

com.powsybl:powsybl-computation-local MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-simulator 3.3.0 - com.powsybl:powsybl-action-util 3.3.0 -...

com.powsybl:powsybl-action-simulator (4.5.1), com.powsybl:powsybl-action-util (4.5.1) +28 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.5.1)

com.powsybl:powsybl-computation-local MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-simulator 4.5.1 - com.powsybl:powsybl-action-util 4.5.1 -...

com.powsybl:powsybl-action-simulator (4.3.0-alpha-1), com.powsybl:powsybl-action-util (4.3.0-alpha-1) +26 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.3.0-alpha-1)

com.powsybl:powsybl-computation-local MAVEN version 4.3.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-simulator 4.3.0-alpha-1 -...

CVE-2026-75145

A flaw was found in FFmpeg. An incorrect integer narrowing conversion in the AV1 RTP packetizer can lead to an out-of-bounds memory access. This occurs when processing specially crafted AV1 RTP Real-time Transport Protocol packets, where a large OBU Operating Block Unit size is incorrectly handle...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: unzip (UTSA-2025-002281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002281 advisory. A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw...

Elixir -- Denial of service via uncontrolled recursion in charlist conversion

tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 exhaust a BEAM node's memory. Inspect.List checks only a bounded prefix 4096 elements by default to determine whether a list is a...

Elixir -- Denial of service via uncontrolled recursion in charlist conversion

tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 exhaust a BEAM node's memory. Inspect.List checks only a bounded prefix 4096 elements by default to determine whether a list is a...

CVE-2026-63384

A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system. Mitigation...

CVE-2026-80489

A flaw was found in glibc. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding for example with iconv can cause the converter to make no progress, hanging the calling application. Some EUCJISX0213 sequences decode to two code points; if the output buffer has room...

CVE-2026-47856

Spring Integration's JSON to object conversion uses the jsonTypeId header to choose the deserialization target type, and resolves that header value to a class with ClassUtils.forName and no type/package allow-list. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0...

SUSE CVE-2026-59187

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 are vulnerable to a heap out-of-bounds write when exrmetrics reads a crafted deep scanline EXR. This occur...

Smb kernel SMB Direct Buffer Overflow DoS

The vulnerability of the smbdirectprepare function in the fs/smb/server/transportrdma.c module of the Smb subsystem in the Linux operating system is related to buffer overflows caused by type conversion errors. Exploiting this vulnerability allows a remote attacker to compromise the...

TencentOS Server 3: resource-agents (TSSA-2026:0903)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0903 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

curl: CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection

Summary When CURLOPTCRLF is enabled, imapperformappend advertises the original input file size in the IMAP APPEND ... N literal but then transmits the expanded body bare LF → CRLF. The server consumes exactly N bytes as the literal, and the overflow bytes are parsed as new IMAP commands in the sa...

CVE-2026-59187

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 are vulnerable to a heap out-of-bounds write when exrmetrics reads a crafted deep scanline EXR. This occur...

CVE-2026-18444

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI...