53604 matches found
CVE-2026-71266
The CVE-2026-71266 entry concerns tinyobjloader-c. In tinyobj_parse_and_index_mtl_file() (tinyobj_loader_c.h), a line from a .mtl file is copied into a fixed 4096-byte stack buffer linebuf using memcpy(linebuf, p, p_len) with only an assert(p_len
ROOT-APP-NPM-AIKIDO-2026-10469 AIKIDO-2026-10469 in knex - Patched by Root
Root has patched AIKIDO-2026-10469 in the knex package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-55255 CVE-2026-55255 in langflow - Patched by Root
Root has patched CVE-2026-55255 in the langflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-RR7J-V2Q5-CHGV GHSA-rr7j-v2q5-chgv in langsmith - Patched by Root
Root has patched GHSA-rr7j-v2q5-chgv in the langsmith package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-41182 CVE-2026-41182 in langsmith - Patched by Root
Root has patched CVE-2026-41182 in the langsmith package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-45134 CVE-2026-45134 in langsmith - Patched by Root
Root has patched CVE-2026-45134 in the langsmith package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1785921265 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.4...
CLSA-2026-1785921094 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.7.12-tuxcare.7...
ROOT-APP-MAVEN-CVE-2026-50193 CVE-2026-50193 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-50193 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-33230 CVE-2026-33230 in nltk - Patched by Root
Root has patched CVE-2026-33230 in the nltk package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-33231 CVE-2026-33231 in nltk - Patched by Root
Root has patched CVE-2026-33231 in the nltk package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-14009 CVE-2025-14009 in nltk - Patched by Root
Root has patched CVE-2025-14009 in the nltk package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-33236 CVE-2026-33236 in nltk - Patched by Root
Root has patched CVE-2026-33236 in the nltk package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-66416 CVE-2025-66416 in mcp - Patched by Root
Root has patched CVE-2025-66416 in the mcp package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1785914728 TuxCare security update for certifi (3 CVEs)
TuxCare rebuilt certifi to address 3 CVEs. Fixed in 2022.12.7.post3+tuxcare...
EUVD-2026-53192
Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php '.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar', checked against the last 4-5 characters of the...
CVE-2026-68075 Apache Qpid Broker-J: Incoming session flow control window can be exceeded
An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...
CVE-2026-67551 Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authentication
pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...