CVE-2026-80881

This Linux kernel vulnerability affects the OCFS2 (Oracle Cluster File System 2) filesystem in the ocfs2_read_blocks() function. The root cause is an incorrect assumption of exclusive ownership of buffer heads returned by sb_getblk(): when put_bh() does not drop the reference count to zero, the b...

CVE-2026-31860

CVE-2026-31860 affects Unhead prior to version 2.1.11, where the useHeadSafe() composable can be bypassed to inject arbitrary HTML attributes (including event handlers) into SSR-rendered tags via acceptDataAttrs. The vulnerability arises from allowing any key starting with data- (and even spaces...