AZL-93093 CVE-2026-56852 affecting package podman 5.6.1-9

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93315 CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93222 CVE-2026-56852 affecting package kubernetes for versions less than 1.30.10-27

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93111 CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93201 CVE-2026-56852 affecting package ignition-flatcar for versions less than 2.22.0-6

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93327 CVE-2026-56852 affecting package vitess for versions less than 19.0.4-11

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93177 CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93165 CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93216 CVE-2026-56852 affecting package keda for versions less than 2.14.1-16

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93168 CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93108 CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93075 CVE-2026-56852 affecting package azl-otel-collector 0.127.0-1

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93198 CVE-2026-46600 affecting package golang 1.26.5-2

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

GHSA-M4P7-R5RC-7G4J pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

Impact The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size...

@0xgraph/cli (>=0.0.1, <=0.2.1), @actra-development-oss/redux-persistable (>=2.0.0, <=3.0.0) +653 more potentially affected by CVE-2026-59879 via immutable (>=4.0.0, <=4.3.8)

immutable NPM version =4.0.0, =0.0.1, =2.0.0, =0.2.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.0.1, =0.11.8-rc.0, =0.1.0, =0.3.3 - @alfresco/adf-testing 6.0.0-A.2-8258 - @alys-chain/graph-alys-cli 0.88.0 and more Source cves: CVE-2026-59879 Source advisory: OSV:GHSA-V56Q-MH7H-F735...

Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

Summary Listset, ListsetSize, ListsetIn, ListupdateIn and the functional set / setIn / updateIn mishandle an index or size in the range 2 30, 2 31: - On an empty List the operation enters an uncatchable infinite loop a tight CPU spin; a surrounding try/catch never regains control. Only killing th...

SUSE-SU-2026:22770-1 Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions

This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues: Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global prototyp...

Security update for php8

This update for php8 fixes the following issues Update to version 8.3.32. CVE-2026-12184: Failure to setup TLS with a remote server can result in a remote DoS bsc1270712. CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw bsc1270351...

AZL-93249 CVE-2026-59845 affecting package libssh for versions less than 0.10.6-9

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...

PT-2026-63114

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Workflow versions 12.2.3 through 12.2.15 Description A flaw in the Workflow Notification Mailer component allows an unauthenticated attacker with network access via SMTP to compromise the system. Successful...