133149 matches found
Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.14 security update
Red Hat multicluster engine for Kubernetes v2.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...
CVE-2026-55620
eml_parser is a Python module for parsing EML files. Prior to 3.0.2 , the eml_parser.routing.noparenthesis function in eml_parser/routing.py removes parenthesized CFWS comments from Received: headers using a regex-based fix-point loop with quadratic running time in nesting depth. A single Receive...
CVE-2026-55620 eml_parser: DoS via deeply nested parens in Received headers
emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, emlparser.routing.noparenthesis in emlparser/routing.py removes parenthesized CFWS comments from Received: headers with a regex-based...
OPENSUSE-SU-2026:21653-1 Security update for v2ray-core
This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.53.0 Add X-Forwarded-For support to gRPC transport Add Stream based Packet Addr for UDP Connections rrpit: compact session, async send, session recovery Add socks5ify engineering command Fix bugs...
EUVD-2026-42395
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript...
CVE-2026-79774
Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...
CVE-2026-13217 NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi
The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...
EUVD-2026-65532
Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...
CVE-2026-55539
PraisonAI, a multi-agent teams system, exposed its async Jobs API (/api/v1/runs) without authentication prior to version 4.6.51. The create_app function mounted the endpoint with no access control, allowing any reachable caller to submit jobs, read results, cancel runs, or delete jobs using opera...
ROOT-OS-DEBIAN-12-CVE-2017-2818 CVE-2017-2818 in poppler - Patched by Root
Root has patched CVE-2017-2818 in the poppler package for Root:Debian:12. Multiple fixed versions available...
EUVD-2026-53582
praisonaiagents has a webcrawl SSRF protection bypass via unchecked redirect targets...
ROOT-OS-DEBIAN-12-CVE-2025-37994 CVE-2025-37994 in linux - Patched by Root
Root has patched CVE-2025-37994 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-68291 CVE-2025-68291 in linux - Patched by Root
Root has patched CVE-2025-68291 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-53134 CVE-2026-53134 in linux - Patched by Root
Root has patched CVE-2026-53134 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-23382 CVE-2026-23382 in linux - Patched by Root
Root has patched CVE-2026-23382 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-39838 CVE-2025-39838 in linux - Patched by Root
Root has patched CVE-2025-39838 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-46054 CVE-2026-46054 in linux - Patched by Root
Root has patched CVE-2026-46054 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-40272 CVE-2025-40272 in linux - Patched by Root
Root has patched CVE-2025-40272 in the linux package for Root:Debian:12. Multiple fixed versions available...