250996 matches found
urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response,...
CLSA-2026-1787671732 TuxCare security update for io.netty (14 CVEs)
TuxCare rebuilt 47 io.netty packages to address 14 CVEs. Fixed in 4.1.115.Final-tuxcare.8...
CVE-2026-79772 Nokogiri before 1.19.1 Unchecked Return Value canonicalize
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...
UBUNTU-CVE-2026-15310
When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...
CGA-FFJQ-F8HQ-RXMM
Bulletin has no description...
CGA-2JQC-5PQ9-6Q9C
Bulletin has no description...
PSF-2026-39
When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...
GO-2026-6278 Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket...
MAL-2026-14499 Malicious code in svelte-map-metric (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2880778c6f9a95fb00d5476c859051c8d9645b321b6d84613a3c28fd55ed0bef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14501 Malicious code in svelte-streak-panel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ecbb895ab58bd860a0104e8ce0cea32f5d34ff53f118ae8591387f5d6121e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CLSA-2026-1787668954 TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 46 io.netty packages to address 8 CVEs. Fixed in 4.1.79.Final-tuxcare.1...
MAL-2026-14493 Malicious code in svelte-daily-streaks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e6392583e46c5137935ed3fb8e29feab51a88b0ddafaf033a27962f8588130 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MINI-RFWQ-7MXV-XJ2F
Bulletin has no description...
MINI-GGGX-JG6P-7MJ8
Bulletin has no description...
MINI-6WVC-G5MQ-MM56
Bulletin has no description...
MINI-4X32-R6VF-X7M7
Bulletin has no description...
MINI-HCP9-238R-RJHH
Bulletin has no description...
MINI-6MXM-RGWR-4FX9
Bulletin has no description...