org.xwiki.commons:xwiki-commons-classloader-protocol-jar (>=4.2-milestone-2, <=12.4), org.xwiki.commons:xwiki-commons-extension-api (>=11.10.11, <=16.10.16) +58 more potentially affected by CVE-2025-55748 +1 more via org.xwiki.commons:xwiki-commons-classloader-api (>=4.2-milestone-2, <=16.10.16)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =4.2-milestone-2, =4.2-milestone-2, =11.10.11, =4.2-milestone-2, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.13 and more Source cves: CVE-2025-55748https://vulner...

org.xwiki.commons:xwiki-commons-extension-api (>=17.5.0, <=17.10.2), org.xwiki.commons:xwiki-commons-extension-handler-jar (>=17.5.0, <=17.10.2) +10 more potentially affected by CVE-2025-55748 +1 more via org.xwiki.commons:xwiki-commons-classloader-api (>=17.5.0, <=17.10.2)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.10.0-rc-1, =17.5.0, =17.10.2 Source cves: CVE-2025-55748, CVE-2026-23734 Source advisory: SNYK:JAVA-ORGXWIKICOMMONS-16786796...

SQL Injection

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to SQL Injection via the process that handles SQL queries. An attacker can execute arbitrary SQL commands by injecting specially...

org.xwiki.commons:xwiki-commons-extension-api (>=18.0.0-rc-1, <=18.0.1), org.xwiki.commons:xwiki-commons-extension-handler-jar (>=18.0.0-rc-1, <=18.0.1) +10 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=18.0.0-rc-1, <=18.0.1)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.1 Source cves: CVE-2026-23734 Source advisory:...

CVE-2026-41054

A flaw was found in haveged. The sockethandler function, responsible for handling connections to the abstract UNIX socket, incorrectly proceeds with execution even after detecting that a connecting user is not root. This oversight allows a local unprivileged user to bypass security checks and...

CVE-2026-8467 Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

Code Injection vulnerability in phenixdigital phoenixstorybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. The psb-assign WebSocket event handler in 'Elixir.PhoenixStorybook.Story.PlaygroundPreviewLive':handleevent/3...

CVE-2026-8467

Code Injection vulnerability in phenixdigital phoenixstorybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. The psb-assign WebSocket event handler in 'Elixir.PhoenixStorybook.Story.PlaygroundPreviewLive':handleevent/3...

EEF-CVE-2026-8467 Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

Summary Code Injection vulnerability in phenixdigital phoenix\storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. The psb-assign WebSocket event handler in...

BIT-PYTHON-MIN-2026-4224 Stack overflow parsing XML with deeply nested DTD content models

When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs...

BIT-GDAL-2026-8213 OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow

A vulnerability has been found in OSGeo gdal up to 3.13.0. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has be...

CVE-2026-41054

In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged. However, while it detects if the connecting user is not root cred.uid != 0 and prepares a negative acknowledgement ASCIINAK, it fails to stop execution. The code proceeds...

CVE-2026-41054

CVE-2026-41054 affects haveged. In haveged’s source havegecmd.c, socket_handler checks the caller via an abstract UNIX socket and returns a negative acknowledgment for non-root users, but execution is not halted, enabling a local unprivileged user to reach privileged actions (e.g., MAGIC_CHROOT)....

CVE-2026-45035

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...

ANT-2026-HY56VRSB · nginx · Heap

heap-buffer-overflow high CVE-2026-27654 Severity Claude high · Security research firm critical · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-HY56VRSB: Heap buffer overflow in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: hi846: Fixed a memory leak in hi846initcontrols The hi846initcontrols function does not clean up the allocated ctrlhdlr resources in case of a failure, which leads to a memory leak. Added v4l2ctrlhandlerfree to properly fr...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: HID: appletbkbd: fixed memory corruption of inputhandlerlist In appletbkbdprobe, an input handler is initialized and then registered with the input core through inputregisterhandler. When this occurs, the input core adds the inpu...

Astra Linux - уязвимость в u-boot

A issue was discovered in Das U-Boot during the period from 2019.07. There is a stack-based buffer overflow in the nfshandler reply helper function: rpclookupreply...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Drivers: Staging: rtl8192eu: Fixed a deadlock in rtwjoinbsseventprehandle. There is a deadlock in rtwjoinbsseventprehandle, as shown below: Thread 1 | Thread 2 | settimer rtwjoinbsseventprehandle | modtimer spinlockbh //1 | Wait...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: The NULL check for currxfer was protected in the IRQ handler. Now, all other accesses to currxfer are performed under a lock. The NULL check for currxfer in tegraqspiisrthread is also protected by a spinlock...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Use the correct type in nvidiasmmucontextfault This issue was overlooked due to the use of function pointers for indirection. nvidiasmmucontextfault is also defined as an irq function, and the type ‘void ’ was...