118 matches found
CVE-2026-13713
A flaw was found in YAML::Syck. This vulnerability allows a remote attacker to cause a denial of service DoS by providing a specially crafted YAML document. The flaw occurs due to a use-after-free and double-free condition when an anchor node is redefined while still on the parser's value stack,...
CVE-2026-13713
YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled libsyck, when an anchor name is redefined or removed, syckhdlraddanchor and syckhdlrremoveanchor free the node stored under that name with...
CLSA-2026-1782159334 python3: Fix of 3 CVEs
CVE-2026-0672: reject control characters in http.cookies Morsel keys, values, and parameters and in BaseCookie.output to prevent HTTP header injection via user-controlled cookie data - CVE-2026-3644: follow-up to CVE-2026-0672, rejecting control characters in the http.cookies.Morsel paths the...
GHSA-W8MW-FRC6-R7M8 ImageMagick: Invalid MSL <map> can result in a use after free
The MSL interpreter crashes when processing a invalid element that causes it to use an image after it has been freed...
EUVD-2026-7412
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing a invalid element that causes it to use an image after it has been freed. Versions 7.1.2-15 and 6.9.13-40 contain a...
EUVD-2021-0355
Malware in sbrugna...
EUVD-2018-8351
Malware in sbrugna...
EUVD-2010-0338
Malware in sbrugna...
EUVD-2018-8350
Malware in sbrugna...
EUVD-2019-0150
Malware in sbrugna...
EUVD-2019-0149
Malware in sbrugna...
EUVD-2025-6593
Malicious code in bioql PyPI...
EUVD-2022-5300
Malicious code in bioql PyPI...
UBUNTU-CVE-2025-48945
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...
CVE-2025-48945 pycares has a Use-After-Free Vulnerability
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...
CVE-2025-48945 pycares has a Use-After-Free Vulnerability
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...
CVE-2025-48945
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...
CVE-2025-48945
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...
CVE-2025-48945: Use After Free
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...
pycares resource management error vulnerability
pycares is a python library by the individual developers at saghul. A resource management error vulnerability exists in pycares versions prior to 4.9.0, which stems from post-release reuse and may cause the interpreter to crash...