CVE-2026-58270

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, the sync diff endpoint compiles a user-supplied string into a RegExp with no complexity validation. A catastrophic-backtracking pattern e.g. ^a++b blocks the Node.js event loop...

CVE-2026-17054

CVE-2026-17054 affects the Espressif ESP-hosted Wi-Fi driver (drivers/wifi/esp_hosted/) in Zephyr RTOS . The 16-bit TLV data_length field is read from SPI frames without bounds-checking against the receive buffer, allowing an adjacent, unauthenticated attacker to trigger an out-of-bounds read of ...

CVE-2026-17054 Out-of-bounds read and permanent loss of Wi-Fi reception in the ESP-hosted SPI driver's frame reassembly

The Espressif ESP-hosted Wi-Fi driver drivers/wifi/esphosted/ parses frames received over SPI from the ESP co-processor in esphostedeventtask. For control frames it took the 16-bit TLV field datalength straight off the wire and passed it to pbistreamfrombufferframe.datavalue, frame.datalength...

CVE-2026-61652

Zapros , a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service via memory exhaustion . The root cause is that its streaming decoders ignored the requested chunk size (both explicit iter_bytes(chunk_size=...) and the default), allowing a single compressed response chunk ...

GHSA-98J2-6V39-78W8 vulnerabilities

Vulnerabilities for packages: opensearch...

Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC

Paradox Security Systems IPR512 中的注入漏洞 - CVE-2023-24709 PoC 在 Paradox Security System IPR512 Web 控制台登录表单页面中，攻击者可以输入 JavaScript 字符串，例如 ，这将覆盖 "login.xml" 文件中的配置，导致登录表单崩溃并不可用。 !!!警告!!! 请注意，这将对服务的运行造成破坏性影响！ 1. Paradox Security Systems IPR512 账户管理 Web 面板可访问。输入 "admin" 作为用户名。 2. 使用 BurpSuite 拦截请求。 3...

MGASA-2026-0433 Updated nmap packages fix a security vulnerability

Denial of Service via Zero-Length TCP Option Packet. CVE-2026-72712...

Updated nmap packages fix a security vulnerability

Denial of Service via Zero-Length TCP Option Packet. CVE-2026-72712...

CVE-2026-85219

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

CVE-2026-73547

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

CVE-2026-73549

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's Utility::copyInternetAddressAndPort and QUIC client-address paths reconstruct scoped IPv6 addresses through addressAsString and Ipv6Instance. The string...

CVE-2026-73512

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

CVE-2026-73550

Envoy (open-source edge/service proxy) is vulnerable to an HTTP/2 memory-exhaustion flaw. When a duplicate Host header is present alongside :authority , Envoy copies the decoded value before discarding it, but the discarded copy bypasses saveHeader and is not charged against request-header size o...

CVE-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

CVE-2026-73547

Envoy 's ext_authz filter contains a null pointer dereference: when an authorization response includes query_parameters_to_set or query_parameters_to_remove, the filter calls request_headers_->Path() to parse the query string. A path-less CONNECT request causes that pointer to be null, and Fil...

CVE-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

CVE-2026-73549 Envoy - Incomplete fix for CVE-2026-26310: copyInternetAddressAndPort crashes on scoped IPv6 addresses in ORIGINAL_DST clusters

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's Utility::copyInternetAddressAndPort and QUIC client-address paths reconstruct scoped IPv6 addresses through addressAsString and Ipv6Instance. The string...

CVE-2026-73549

CVE-2026-73549 is an incomplete fix for CVE-2026-26310 in Envoy (versions prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1). The Utility::copyInternetAddressAndPort and QUIC client-address paths reconstruct scoped IPv6 addresses via addressAsString and Ipv6Instance, producing a string with a percent ...

CVE-2026-73549 Envoy - Incomplete fix for CVE-2026-26310: copyInternetAddressAndPort crashes on scoped IPv6 addresses in ORIGINAL_DST clusters

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's Utility::copyInternetAddressAndPort and QUIC client-address paths reconstruct scoped IPv6 addresses through addressAsString and Ipv6Instance. The string...

CVE-2026-85219

CVE-2026-85219 is a Denial-of-Service vulnerability in the Redis module of Thinkst Canary's OpenCanary 0.9.9 . An unauthenticated remote attacker can trigger unconstrained memory usage , leading to service degradation. The CVSS 3.1 score is 3.7 (Low) , reflecting a network attack vector with high...