CVE-2026-61556: Loop with Unreachable Exit Condition

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. From 10.26.0 until 10.27.1, the striphtml filter in src/filters/html.ts can enter an infinite loop when an input string contains . In striphtml, the search for the next opener advances lt while the loop index...

ALSA-2026:56965 Moderate: libcupsfilters security update

Libcupsfilters provides a library, which implements common functions used in cups-browsed daemon and printing filters, and additional files as banner templates and character sets. The filters are used in CUPS daemon and in printer applications. Security Fixes: libcupsfilters: cups-filters:...

SUSE CVE-2026-72522

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...

DoS (Denial of Service) nanoid Dependency in Crowd Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-67214 was introduced in 6.2.0 and later of Crowd Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:...

DoS (Denial of Service) nanoid Dependency in Crowd Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-67213 was introduced in 6.2.0 and later of Crowd Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:...

GO-2026-6115 WITHDRAWN: Multiple denial of service vulnerabilities in rsc.io/pdf and forks

This report has been withdrawn with reason: "Report mistakenly added without having CVE / GHSA associated". The PDF parser in rsc.io/pdf and its downstream forks github.com/ledongthuc/pdf and github.com/dslipak/pdf contains multiple defects when parsing untrusted input: - Unchecked /Size, /Index,...

CVE-2026-72193

A flaw was found in the Linux kernel's ntfs3 driver. A remote attacker could exploit this by providing a specially crafted NTFS3 disk image, which, when mounted, triggers an in-kernel infinite loop. This can cause the system to hang, leading to a Denial of Service DoS where the system becomes...

CVE-2026-67214

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

OPENSUSE-SU-2026:21589-1 Security update for python-PyPDF2

This update for python-PyPDF2 fixes the following issues: Changes in python-PyPDF2: - CVE-2026-59937: possible long runtimes for repeated malformed cross-reference entries bsc1271147 - CVE-2026-59936: possible infinite loop for not terminated inline images bsc1271146...

SUSE CVE-2026-13002

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients...

SUSE CVE-2026-18726

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service DoS in the iscsiuio daemon. By sending a specially crafted Internet Control Message Protocol version 6 ICMPv6 Router Advertisement with a zero-length option,...

Linux Distros Unpatched Vulnerability : CVE-2026-72029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: wwan: iosm: bound device offsets in the MUX downlink decoder muxdladbdecode walks a chain of aggregated datagram tables using offsets and lengths taken fro...

ROS-20260818-73-0042

The vulnerability in xrdp is related to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-74420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VMIO or VMPFNMAP when creating SVM ranges VMAs marked with VMIO...

Debian Security Advisory 6446-1

Debian Linux Security Advisory 6446-1 - A flaw was discovered in the UTF-16 decoding support of expat, an XML parsing C library, where low surrogates were treated in the same way as high surrogates. Parsing crafted XML input may result in an out-of-bounds read and a resultant infinite loop, leadi...

ROS-20260818-73-0003

The vulnerability in Wireshark relates to executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow a hacker to cause a service failure...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-2063)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2063 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...

Amazon Linux 2023 : docker (ALAS2023-2026-2062)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2062 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...

Amazon Linux 2 : docker, --advisory ALAS2NITRO-ENCLAVES-2026-116 (ALASNITRO-ENCLAVES-2026-116)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-116 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-72193

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs3: cap RESTARTTABLE free-chain walker at rt-used A crafted NTFS3 disk image triggers an in-kernel infinite loop at mount time, hanging the mounting thread...