CVE-2026-62866: Improper Validation of Array Index

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.2, selector/lexer/tokenize.go parseCurRune advances the input index across trailing whitespace and then reads the source at the exhausted index without an end-of-input check. ...

CVE-2026-65654: Allocation of Resources Without Limits or Throttling

github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application changes the local node's labels, but affected versions do not apply those limits to label maps received in SWIM membership changes. A network peer that can reach a live Ringpop TChannel listener can...

TencentOS Server 2: gdk-pixbuf2 (TSSA-2026:1038)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1038 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CVE-2026-88408: Stack-based Buffer Overflow

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88412: Integer Overflow or Wraparound

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

Linux Distros Unpatched Vulnerability : CVE-2026-64847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool...

Linux Distros Unpatched Vulnerability : CVE-2026-63635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...

ROS-20260921-73-0091

The vulnerability is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability can allow a remote attacker to trigger a service failure rdos...

RHEL 9 : libsoup (RHSA-2026:69108)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69108 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: SoupWebsocketExtensionDeflate: libsoup: libsoup:...

RHEL 10 : yggdrasil-worker-package-manager (RHSA-2026:69099)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69099 advisory. yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable...

ROS-20260921-73-0066

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260921-73-0077

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260921-73-0049

The vulnerability in Xen is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260921-73-0104

The vulnerability of the 389 Directory Server catalog service server is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

RHEL 10 : rhc (RHSA-2026:69103)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69103 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

ROS-20260921-73-0114

The vulnerability of the Go programming language is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

RHEL 8 : rhc (RHSA-2026:69258)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:69258 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fixes:...

CVE-2026-88411

Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...

CVE-2026-68914

Mojolicious is a real-time web framework for Perl. Prior to 9.47, the pure-Perl implementation of Mojo::JSON does not limit nesting depth when Cpanel::JSON::XS is unavailable or MOJONOJSONXS is enabled. An attacker who can supply untrusted JSON to decodejson, fromjson, or j can submit deeply nest...

The vulnerability of the django.contrib.gis.gdal.GDALRaster module in the Django web application framework allows a attacker to disclose protected information or cause service failures.

The vulnerability of the django.contrib.gis.gdal.GDALRaster module in the Django web application framework is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service...