197903 matches found
DEBIAN-CVE-2026-65904
DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...
DEBIAN-CVE-2026-65903
DOMPurify before 3.4.0 contains a logic error in the ADDTAGS function where short-circuit evaluation allows forbidden tags to bypass FORBIDTAGS restrictions. Attackers can craft input containing tags listed in FORBIDTAGS that are also added via ADDTAGS function, causing them to be retained in...
DEBIAN-CVE-2026-52684
If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...
DEBIAN-CVE-2026-65899
DOMPurify 3.0.0 before 3.4.9 does not reset the retained Trusted Types policy when clearConfig is called, so a DOMPurify instance reused across trust boundaries stays bound to a previously supplied TRUSTEDTYPESPOLICY. A later caller that requests RETURNTRUSTEDTYPE output receives a TrustedHTML...
CVE-2026-25800
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous...
EUVD-2026-40847
c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets...
MINI-3H8C-RRPF-G847
Bulletin has no description...
MINI-7M2W-H9GV-88WM
Bulletin has no description...
MINI-QR8J-3PHR-4QJ7
Bulletin has no description...
MINI-HWFG-WGWX-C7MH
Bulletin has no description...
MINI-G2X5-FG8F-3Q9W
Bulletin has no description...
MINI-RWWP-H8JQ-G6HF
Bulletin has no description...
MINI-C8H8-WHV8-5RF4
Bulletin has no description...
MINI-VJGP-R4MG-WC3J
Bulletin has no description...
CGA-Q348-JCX2-VQC9
Bulletin has no description...
MINI-W4X6-H38W-CR86
Bulletin has no description...
CGA-JMHM-6G66-GJWF
Bulletin has no description...
CGA-4WPM-WP9R-M6GP
Bulletin has no description...