ROS-20260805-73-0011

The vulnerability of the deviceadd function in Linux kernel is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260805-73-0012

The vulnerability of the casinitone function in Linux kernel relates to memory release errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2026-20124: Missing Release of Resource after Effective Lifetime

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This vulnerability is due to improper error handling when parsing...

Python cryptography Library Data Compromise

The vulnerabilities of the functions pkcs7decryptsmime, pkcs7decryptpem, and pkcs7decryptder in the Python programming language-based cryptography library are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities could allow an attacker to influence the...

Security update for python-httplib2 (important)

openSUSE security update: security update for python-httplib2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21526-1 Rating: important References: bsc1271095 Cross-References: CVE-2026-59939 CVSS scores: CVE-2026-59939 SUSE : 7.5...

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...

GHSA-PWXH-7358-JQ2X Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...

CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...

CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...

CVE-2026-69702

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

CVE-2026-13229

Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-69702 SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

EUVD-2026-52851

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

CVE-2026-69702

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

EUVD-2026-52817

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47622

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47622

Technical details for CVE-2026-47622 are not publicly available in the provided documents. The sources describe an information disclosure risk but do not disclose affected components, root cause, or mitigations. Monitor for updates.