biobb-io (>=0.0.1, <=0.0.8), biobb-model (>=0.0.1, <=0.0.10) +3 more potentially affected by CVE-2026-115355 via mistune (0.7.4)

mistune PYPI version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on mistune and may be impacted: - biobb-io =0.0.1, =0.0.1, =0.2.1, =2.2.20170208112505, =2.7.20181012180226 Source cves: CVE-2026-115355 Source advisory: OSV:GHSA-H7WW-273W-6CM8...

crossbar (17.3.1) potentially affected by CVE-2026-115776 via twisted (17.1.0)

twisted PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - crossbar 17.3.1 Source cves: CVE-2026-115776 Source advisory: OSV:GHSA-53XC-49M8-P798...

crossbar (17.3.1) potentially affected by CVE-2026-115877 via twisted (17.1.0)

twisted PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - crossbar 17.3.1 Source cves: CVE-2026-115877 Source advisory: OSV:GHSA-Q7QQ-6MHP-9RC4...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: The crossbardomainfree function should use the correct index when resetting the domain data. Instead, it resets the domain data and then uses the irqdata-hwirq member as the index to reset the irqmap entry. This...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Be sure to drop the reference taken when looking up the crossbar platform device during am335x route allocation...

crossbar (17.3.1) potentially affected by CVE-2026-106454 via twisted (17.1.0)

twisted PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - crossbar 17.3.1 Source cves: CVE-2026-106454 Source advisory: OSV:PYSEC-2026-4304...

crossbar (17.3.1) potentially affected by CVE-2026-106454 via twisted (17.1.0)

twisted PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - crossbar 17.3.1 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

crossbar (17.3.1) potentially affected by CVE-2026-77528 via autobahn (0.18.1)

autobahn PYPI version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - crossbar 17.3.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

kogniserver (0.3.1) potentially affected by CVE-2026-77528 via crossbar (18.4.1)

crossbar PYPI version 18.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on crossbar and may be impacted: - kogniserver 0.3.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4031...

simpl-modelservice (>=0.7.7, <=0.10.1) potentially affected by CVE-2026-77528 via crossbar (17.10.1)

crossbar PYPI version 17.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on crossbar and may be impacted: - simpl-modelservice =0.7.7, =0.10.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4031...

crossbar (17.3.1) potentially affected by CVE-2026-77528 via autobahn (0.18.1)

autobahn PYPI version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - crossbar 17.3.1 Source cves: CVE-2026-77528 Source advisory: OSV:GHSA-HXP9-W8X3-P566...

simpl-modelservice (>=0.7.7, <=0.10.1) potentially affected by CVE-2026-77528 via crossbar (17.10.1)

crossbar PYPI version 17.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on crossbar and may be impacted: - simpl-modelservice =0.7.7, =0.10.1 Source cves: CVE-2026-77528 Source advisory: OSV:GHSA-HXP9-W8X3-P566...

kogniserver (0.3.1) potentially affected by CVE-2026-77528 via crossbar (18.4.1)

crossbar PYPI version 18.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on crossbar and may be impacted: - kogniserver 0.3.1 Source cves: CVE-2026-77528 Source advisory: OSV:GHSA-HXP9-W8X3-P566...

Allocation of Resources Without Limits or Throttling

Overview crossbar is a Crossbar.io multi-protocol WAMP/WebSocket, REST/HTTP, MQTT application router for microservices. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the onFrameData function in protocol.py, where the...

kogniserver (0.3.1), simpl-modelservice (>=0.7.7, <=0.10.1) potentially affected by CVE-2026-77528 via crossbar (>=17.10.1, <=18.4.1)

crossbar PYPI version =17.10.1, =0.7.7, =0.10.1 Source cves: CVE-2026-77528 Source advisory: MEND:CVE-2026-77528...

SUSE CVE-2026-72153

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

CVE-2026-72153

A flaw was found in the Linux kernel's irqchip/crossbar component. The crossbardomainfree function incorrectly uses a nulled-out hardware interrupt hwirq member as an index when attempting to free domain data. This can lead to an out-of-bounds write when resetting an interrupt mapping entry or...

Linux Distros Unpatched Vulnerability : CVE-2026-72153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index t...

CVE-2026-72153

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

CVE-2026-72153

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...