Uncontrolled Recursion

Overview deepmerge-ts is a Deeply merge 2 or more objects respecting type information. Affected versions of this package are vulnerable to Uncontrolled Recursion via the deepmerge and deepmergeInto functions. An attacker can cause a process crash or denial of service by supplying crafted recursiv...

CVE-2026-75003

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to information disclosure or privilege escalation...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

MINI-3VCQ-CRFH-423M

Bulletin has no description...

MINI-HFM6-54J5-Q9HM

Bulletin has no description...

MINI-5HH7-GH6W-8RF9

Bulletin has no description...

MINI-2V6R-GM7X-XCQ5

Bulletin has no description...

MINI-CPP7-M5RW-RCRF

Bulletin has no description...

MINI-RR2X-3VGW-CCC6

Bulletin has no description...

MINI-86H7-88M8-4QJC

Bulletin has no description...

MINI-FV6M-X7PX-MH3V

Bulletin has no description...

MINI-J58C-6QFP-43G2

Bulletin has no description...

MINI-274P-FCF3-PJQ9

Bulletin has no description...

MINI-MW32-3V5M-C3MG

Bulletin has no description...

MINI-28X3-W7QW-C3CW

Bulletin has no description...

MINI-J3JF-3394-PMW4

Bulletin has no description...

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

BIT-TOMCAT-2026-66299 Apache Tomcat: DoS via WebSocket chat example

Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application...

BIT-PYTHON-MIN-2026-6879 Quadratic Behavior in xml.etree.ElementPath Index Predicates

Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many same-tag siblings. Element.find is only affected when the first match is near the end of the sibling list, such as with last or...