3068 matches found
fastrepl (>=0.0.21, <=0.0.25), funcflow (0.0.3) +2 more potentially affected by CVE-2026-84377 via litellm (0.8.6)
litellm PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl =0.0.21, =0.0.5, =0.0.9 Source cves: CVE-2026-84377 Source advisory: OSV:GHSA-3CV6-JPF6-8222...
open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-84377 via litellm (0.7.10)
litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-84377 Source advisory: OSV:GHSA-3CV6-JPF6-8222...
CVE-2026-55107 Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)
Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts LLM-generated code, user formulas, student submissions, third-party plugins in-process without giving them access to host memory, files, network, or credentials. Fr...
AlmaLinux 9.2 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc (ALMALINUX9.2:CLSA-2025:1742923385)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1742923385 advisory. - In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript...
Linux BPF Map Get Info By FD Use-After-Free
The vulnerability of the bpfmapgetinfobyfd function in the kernel/bpf/syscall.c module, which is part of the Linux operating system’s BPF interpreter support, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the...
CentOS Linux 7 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS7:CLSA-2026:1782223154)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1782223154 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim f...
AZL-105672 CVE-2026-102938 affecting package python-virtualenv 20.36.1-6
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write writes prompt values verbatim to the line-oriented pyvenv.cfg format while PyEnvCfg.readvalues parses the file with str.splitlines and accepts the last value for duplicate keys. An attacker wh...
Important: libpcap
Issue Overview: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the...
Amazon Linux 2023 : libpcap, libpcap-devel (ALAS2023-2026-3100)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3100 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not...
Amazon Linux 2 : libpcap (ALAS-2026-3927)
The version of libpcap installed on the remote host is prior to 1.5.3-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3927 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit...
Important: libpcap
Issue Overview: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the...
PHPseclib SSRF
The vulnerability of the PHPseclib cryptographic protocol interpreter library is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform a SSRF attack remotely...
PHP Null Pointer DoS
The vulnerability of the PHP interpreter is related to pointer operations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-100570
OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...
CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS
OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...
CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS
OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...
OESA-2026-4100 libpcap security update
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and...
PHP Buffer Overflow DoS
The vulnerability of the PHP interpreter is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SUSE CVE-2026-93270
In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...