DEBIAN-CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

UBUNTU-CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

CVE-2026-87859 morgan vulnerable to Log Injection via unescaped double quote in quoted log fields

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

CVE-2026-87859 morgan vulnerable to Log Injection via unescaped double quote in quoted log fields

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...

CVE-2026-87859

morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1 , the escapeLogField() function fails to escape the double quote character, which delimits quoted fields in the Apache combined log format. An unauthenticated remote attacker who controls a value written to a quote...

PT-2026-96464

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailer buf on readdir copy failure On a readdir downcall, orangefs devreq write iter frees op-downcall.trailer buf with vfree when copy from iter full fails, but does not clear the pointer before got...

CVE-2026-89767: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ovl: fix double endcreating on the casefold-mismatch path ovlcreatereal releases the new dentry twice when the casefold consistency check fails. The SIFDIR branch calls endcreating and sets err, then falls through to the common...

PT-2026-90119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt network component where failure paths in the tbnet connected work function do not clear the login sent variable. This causes the connection to appear...

PT-2026-90483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ovl create real function where a new dentry is released twice when a casefold consistency check fails. Specifically, in the S IFDIR branch, the end creating functi...

PT-2026-90457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where improper error handling in the video register device function leads to a double-free scenario. This occurs when device register fails and both p...

PT-2026-90279

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ip6 tnl xmit function where the use of skb realloc headroom to expand headroom for outer IPv6 and optional encap headers can lead to a use-after-free scenario. The...

PT-2026-96395

In the Linux kernel, the following vulnerability has been resolved: ip6 tunnel: use skb cow head in ip6 tnl xmit ip6 tnl xmit may need to expand headroom before it can push the outer IPv6 and optional encap headers. It currently does that with skb realloc headroom, copies skb-sk ownership, consum...

PT-2026-96452

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in video register device" This reverts commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a. The intentions of that patch were good, but it doesn't work. The idea is that if device register...

CVE-2026-89741: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in videoregisterdevice" This reverts commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a. The intentions of that patch were good, but it doesn't work. The idea is that if deviceregister...

CVE-2026-89563: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: use skbcowhead in ip6tnlxmit ip6tnlxmit may need to expand headroom before it can push the outer IPv6 and optional encap headers. It currently does that with skbreallocheadroom, copies skb-sk ownership, consumes the...

PT-2026-90298

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the bnx2x driver. The function bnx2x init firmware frees the pointers bp-init ops, bp-init data, and bp-init ops offsets during an error path without settin...

PT-2026-96545

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x init firmware error path bnx2x init firmware frees bp-init ops, bp-init data and bp-init ops offsets in its error path without setting them to NULL. The cleanup function bnx2x release firmware free...

PT-2026-89814

Name of the Vulnerable Software and Affected Versions morgan versions prior to 1.12.1 Description The escapeLogField function fails to escape the double quote character used to delimit quoted fields in the Apache combined log format. An unauthenticated remote attacker can exploit this by injectin...

PT-2026-90214

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the orangefs component. During a readdir downcall, the function orangefs devreq write iter releases the op-downcall.trailer buf pointer using vfree if copy...

PT-2026-90307

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/rocket component where the rocket ioctl submit job function releases rjob via rocket job put during allocation error paths. Because rocket job cleanup...