12242 matches found
CVE-2026-106063 Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...
EUVD-2026-93943
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...
CVE-2026-106063
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...
CVE-2026-106063
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...
CVE-2026-105844
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
Payload: Prototype pollution in Payload Import Export plugin
Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...
GHSA-QF28-8HC6-VWRP Payload: Prototype pollution in Payload Import Export plugin
Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...
@frogbotai/plugin-import-export (>=0.14.0, <=0.21.0) potentially affected by CVE-2026-105844 via @payloadcms/plugin-import-export (3.85.1)
@payloadcms/plugin-import-export NPM version 3.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on @payloadcms/plugin-import-export and may be impacted: - @frogbotai/plugin-import-export =0.14.0, =0.21.0 Source cves: CVE-2026-105844 Source advisory:...
@frogbotai/plugin-import-export (>=0.14.0, <=0.21.0) potentially affected by CVE-2026-105844 via @payloadcms/plugin-import-export (3.85.1)
@payloadcms/plugin-import-export NPM version 3.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on @payloadcms/plugin-import-export and may be impacted: - @frogbotai/plugin-import-export =0.14.0, =0.21.0 Source cves: CVE-2026-105844 Source advisory:...
CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
CVE-2026-105844
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
CVE-2026-105844
Payload , a headless content management system, contains a prototype pollution vulnerability in the @payloadcms/plugin-import-export plugin. An unauthenticated user can submit prototype-sensitive field paths, leading to unintended application behavior and potential remote code execution (RCE) . T...
CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
@frogbotai/plugin-import-export (>=0.14.0, <=0.21.0) potentially affected by CVE-2026-105844 via @payloadcms/plugin-import-export (3.85.1)
@payloadcms/plugin-import-export NPM version 3.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on @payloadcms/plugin-import-export and may be impacted: - @frogbotai/plugin-import-export =0.14.0, =0.21.0 Source cves: CVE-2026-105844 Source advisory:...
CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
EUVD-2026-93470
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
CVE-2026-104757
Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...
CVE-2026-104757 WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability
Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...
CVE-2026-104757 WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability
Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...