CVE-2026-95834 Use after free in the kitty drag and drop protocol when a drag source item is aborted mid-transfer

Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to cause the terminal to read from and write to freed heap memory, because dragremotefiledata in kitty/dnd.c holds a DragRemoteItem pointer into an arra...

CVE-2026-74766

The Net::IDN::Punycode Perl module (versions 2.301 before 2.590 ) is vulnerable to a heap use-after-free flaw within its XS backend . The issue occurs in the decode_punycode function because the code computes an insertion pointer before growing the buffer; when a code point above U+FFFF forces a ...

Unchecked Return Value

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities

...