23654 matches found
PT-2026-73054
siyuan versions = 3.7.3 fixed in v3.7.4 contain a server-side template injection vulnerability in the attribute-view Template calculation feature introduced in v3.7.0-beta.1. The feature's template engine uses Sprig's unmodified function map, which still exposes the env, expandenv, and...
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...
GHSA-9HGC-G3W5-67CM ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...
UBUNTU-CVE-2026-13002
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients...
EUVD-2026-58674
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients...
CVE-2026-13002
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients. Mitigation Mitigation for this issue is either no...
RHSA-2026:54654 Red Hat Security Advisory: bind security update
Bulletin has no description...
RHSA-2026:54510 Red Hat Security Advisory: bind security update
Bulletin has no description...
RHSA-2026:54509 Red Hat Security Advisory: bind9.16 security update
Bulletin has no description...
GO-2025-3743 vulnerabilities
Vulnerabilities for packages: eks-distro, eks-distro-fips, juicefs, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips...
GO-2026-5667 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, k8sgateway-fips, juicefs, kubernetes-dns-node-cache, k8sgateway, eks-distro, kubernetes-dns-node-cache-fips...
GO-2026-5738 vulnerabilities
Vulnerabilities for packages: k8sgateway-fips, k8sgateway, external-dns, external-dns-fips...
GO-2026-4969 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, k8sgateway-fips, juicefs, kubernetes-dns-node-cache, k8sgateway, eks-distro, kubernetes-dns-node-cache-fips...
GO-2026-4630 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, k8sgateway-fips, juicefs, kubernetes-dns-node-cache, k8sgateway, eks-distro, kubernetes-dns-node-cache-fips...
GO-2026-4635 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, eks-distro, eks-distro-fips...
GO-2026-5417 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, k8sgateway-fips, juicefs, kubernetes-dns-node-cache, k8sgateway, eks-distro, kubernetes-dns-node-cache-fips...
GO-2026-5583 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, k8sgateway-fips, juicefs, kubernetes-dns-node-cache, k8sgateway, eks-distro, kubernetes-dns-node-cache-fips...
GO-2026-5889 vulnerabilities
Vulnerabilities for packages: external-dns, external-dns-fips...