ECHO-2AAB-293D-53AF

Bulletin has no description...

MINI-H9QX-MCHF-C75R

Bulletin has no description...

UBUNTU-CVE-2026-82562

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

CVE-2026-82562 qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

CVE-2026-82562 qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

CVE-2026-82562

CVE-2026-82562 affects the qs Node.js querystring parser (v6.14.2 through v6.15.3). When qs.parse is called with both comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key (a[]=1,2,3,4) is wrapped as a single nested element before the arrayLimit check runs, ...

MINI-2JCC-HCXQ-PF4J

Bulletin has no description...

MINI-JJVQ-7M2J-2W26

Bulletin has no description...

MINI-4C59-6MWM-8QRJ

Bulletin has no description...

MINI-69FF-QRQC-9P2W

Bulletin has no description...

MINI-7WMJ-QWFH-V5V4

Bulletin has no description...

MINI-RGJX-RH5W-JXJX

Bulletin has no description...

MINI-FGF6-X66V-GCCV

Bulletin has no description...

MINI-84XF-JRM9-W89J

Bulletin has no description...

MINI-2CG6-RJHG-VX7R

Bulletin has no description...

MINI-G5GF-CGQG-59PC

Bulletin has no description...

MINI-RCJJ-3RQR-P3QX

Bulletin has no description...

MINI-RQ59-WWG4-6VCQ

Bulletin has no description...

GHSA-F2XF-7X3G-4272 PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction

Summary Stored cross-site scripting XSS in PrivateBin's attachment download link. An anonymous attacker can create a paste with a text/html attachment that, with certain user interaction, bypasses protections similar to CVE-2022-24833. When a victim opens the "Download attachment" link in a new...

CVE-2026-77184 MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...