Lucene search
+L

60 matches found

osv-clsa
osv-clsa
•added 2026/10/06 12:36 p.m.•9 views

CLSA-2026-1791290211 TuxCare security update for linkify-it (1 CVE)

TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.2...

8.7CVSS6.4AI score0.00515EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/02 4:52 p.m.•13 views

Security Bulletin: Vulnerability in linkify-it bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the linkify-it library, which is affected by a denial of service vulnerability. CVE-2026-59887, CVE-2026-48801. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...

8.7CVSS6.2AI score0.00644EPSS
SaveExploits2Affected Software2
osv-clsa
osv-clsa
•added 2026/09/27 2:45 p.m.•13 views

CLSA-2026-1790520316 TuxCare security update for linkify-it (1 CVE)

TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.1...

7.5CVSS6.2AI score0.00644EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/09/27 12:00 a.m.•5 views

PT-2026-107634

TuxCare rebuilt linkify-it to address 1 CVE. Fixed in 2.2.0-tuxcare.1...

5.9AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/15 10:01 a.m.•23 views

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-41115 DESCRIPTION: An improper authorization vulnerability has been identified in Apache Kafka. The...

7.5CVSS6.5AI score0.00647EPSS
SaveExploits4Affected Software1
osv-root
osv-root
•added 2026/09/09 5:03 p.m.•14 views

ROOT-APP-NPM-CVE-2026-59887 CVE-2026-59887 in linkify-it - Patched by Root

Root has patched CVE-2026-59887 in the linkify-it package for Root:npm. Multiple fixed versions available...

7.5CVSS6AI score0.00644EPSS
SaveExploits1
osv-mgasa
osv-mgasa
•added 2026/09/05 4:35 a.m.•12 views

MGASA-2026-0377 Updated python-linkify-it-py package fixes security vulnerabilities

LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. Fix quadratic complexity in LinkifyIt.match, port of linkify-it 5.0.1 and 5.0.2 upstream CVE-2026-48801, CVE-2026-59887 82 Match validators at a position instead of slicing the tail, needed because Pytho...

8.7CVSS6.2AI score0.00644EPSS
SaveExploits2References3
Mageia
Mageia
•added 2026/09/05 4:35 a.m.•22 views

Updated python-linkify-it-py package fixes security vulnerabilities

LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. Fix quadratic complexity in LinkifyIt.match, port of linkify-it 5.0.1 and 5.0.2 upstream CVE-2026-48801, CVE-2026-59887 82 Match validators at a position instead of slicing the tail, needed because Pytho...

8.7CVSS6.3AI score0.00644EPSS
SaveExploits2References2
Atlassian
Atlassian
•added 2026/09/02 5:32 p.m.•25 views

DoS (Denial of Service) linkify-it Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

8.7CVSS6AI score0.00515EPSS
SaveExploits1
Atlassian
Atlassian
•added 2026/09/02 5:32 p.m.•28 views

DoS (Denial of Service) linkify-it Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

7.5CVSS6AI score0.00644EPSS
SaveExploits1
Fedora
Fedora
•added 2026/09/02 1:34 a.m.•18 views

[SECURITY] Fedora 44 Update: python-linkify-it-py-2.1.1-1.fc44

This is a Python port of linkify-it 1, a link recognition library with FULL unicode support. It is focused on high quality link pattern detection in plain text. See a JavaScript demo 2. References: 1 https://github.com/markdown-it/linkify-it 2 https://markdown-it.github.io/linkify-it/...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/02 12:00 a.m.•17 views

Fedora 44 : python-linkify-it-py (2026-7c23b06d74)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7c23b06d74 advisory. Security release: LinkifyIt.match was quadratic on untrusted input when linkify is enabled GHSA-8m2q-wq3r-6hq8. - Fix quadratic complexity in...

8.7CVSS6.4AI score0.00644EPSS
SaveExploits2References3
osv-root
osv-root
•added 2026/09/01 9:56 a.m.•18 views

ROOT-APP-NPM-CVE-2026-48801 CVE-2026-48801 in linkify-it - Patched by Root

Root has patched CVE-2026-48801 in the linkify-it package for Root:npm. Multiple fixed versions available...

8.7CVSS6.1AI score0.00515EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2026/08/20 4:08 p.m.•22 views

linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability

A flaw was found in linkify-it, a library for recognizing links with full Unicode support. The LinkifyIt.prototype.match function, the package's primary public API, has an algorithmic complexity of ON² for inputs containing many fuzzy links or emails. This can be exploited by a remote attacker...

8.7CVSS6.1AI score0.00515EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2026/08/19 6:16 p.m.•18 views

CVE-2026-59887

A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result ...

7.5CVSS6.1AI score0.00644EPSS
SaveExploits1References6
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/12 12:58 p.m.•18 views

Security Bulletin: linkify-it-5.0.1.tgz security vulnerability in Content Cortex(CCx) reported for GenAI ICN Plugin

Summary linkify-it-5.0.1.tgz CVE-2026-59887 security vulnerability in Content CortexCCx reported for GenAI ICN Plugin Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by...

7.5CVSS6.2AI score0.00644EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/11 8:39 a.m.•30 views

Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for July 2026- Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Automation Decision Services. See full list below. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...

9.8CVSS7.1AI score0.02618EPSS
SaveExploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/06 1:11 p.m.•21 views

Security Bulletin: Cyber Fraud includes components with multiple known vulnerabilities

Summary Cyber Fraud includes components with known vulnerabilities. These have been addressed in the update. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test and...

7.5CVSS6.4AI score0.00644EPSS
SaveExploits4Affected Software1
Atlassian
Atlassian
•added 2026/08/05 5:31 p.m.•23 views

DoS (Denial of Service) linkify-it Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.2, 10.1.2, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

8.7CVSS6.1AI score0.00515EPSS
SaveExploits1
Atlassian
Atlassian
•added 2026/08/05 5:30 p.m.•17 views

DoS (Denial of Service) linkify-it Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.1.2, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

7.5CVSS6.1AI score0.00644EPSS
SaveExploits1
Rows per page
Query Builder