GHSA-8JVC-MCX6-R4CG

creationtimestamp| type| source ---|---|--- 2026-04-10 17:21:41+00:00| published-proof-of-concept| Telegram/VrQ9Ov0zxRZi9WqN3kvWB9KwPzyBbBtKpr0H2dFm10XhQ...

CVE-2031-45862

creationtimestamp| type| source ---|---|--- 2026-04-10 16:12:26+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mj5pmw6q7722...

CVE-2026-35599 Vikunja has an Algorithmic Complexity DoS in Repeating Task Handler

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the addRepeatIntervalToTime function uses an On loop that advances a date by the task's RepeatAfter duration until it exceeds the current time. By creating a repeating task with a 1-second interval and a due date far ...

CVE-2026-34477

creationtimestamp| type| source ---|---|--- 2026-04-10 15:45:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj5o3zfi6q26 2026-05-13 16:36:23+00:00| seen| https://gist.github.com/ppkarwasz/53b0a3c07a9e44aa945726138f67d11c...

Vikunja has Algorithmic Complexity DoS in Repeating Task Handler

Summary The addRepeatIntervalToTime function uses an On loop that advances a date by the task's RepeatAfter duration until it exceeds the current time. By creating a repeating task with a 1-second interval and a due date far in the past, an attacker triggers billions of loop iterations, consuming...

GHSA-2FXP-43J9-PWVC

creationtimestamp| type| source ---|---|--- 2026-04-10 14:32:09+00:00| seen| https://poliverso.org/objects/0477a01e-2ea9cd48-339e9a3e45089926...

CVE-2026-6068

creationtimestamp| type| source ---|---|--- 2026-04-10 14:05:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5ijg32n22q 2026-05-21 09:49:47+00:00| seen| https://bsky.app/profile/bontchev.infosec.exchange.ap.brid.gy/post/3mme5ekfzk7a2 2026-05-27 14:27:12+00:00| seen|...

CVE-2026-6037

creationtimestamp| type| source ---|---|--- 2026-04-10 10:26:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj54braecd2d 2026-04-10 11:16:18+00:00| published-proof-of-concept| Telegram/khgEEPiWkGL9WACMPfvZ8dGv1ooPTaC6hfehoeURB75s6dQ...

CVE-2026-25018

creationtimestamp| type| source ---|---|--- 2026-04-10 08:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj4vsf57bz2r...

CVE-2026-6007

creationtimestamp| type| source ---|---|--- 2026-04-10 06:18:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4ohjtl5g2q...

CVE-2026-25406

creationtimestamp| type| source ---|---|--- 2026-04-10 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj4lqjxe572j...

CVE-2026-5998

creationtimestamp| type| source ---|---|--- 2026-04-10 02:22:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4bayjzu52j...

CVE-2026-1263

creationtimestamp| type| source ---|---|--- 2026-04-10 02:19:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4b2zhaul24 2026-04-19 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjuidmaf7l2c...

EUVD-2026-21233

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

EUVD-2026-21108

OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by triggering local reconnection to silently...

CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

DEBIAN-CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

UBUNTU-CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the wolfSSLX509notAfter or wolfSSLX509notBefore functions when parsing date fields from a specially crafted X.509 certificate via the compatibility layer API. An attacker can cause a buffer overflow by...

CVE-2026-5448

X.509 date buffer overflow in wolfSSLX509notAfter / wolfSSLX509notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS...