AZL-93168 CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93087 CVE-2026-56852 affecting package kata-containers-preview 3.27.0~preview2-2

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93273 CVE-2026-56852 affecting package opa for versions less than 0.63.0-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93078 CVE-2026-56852 affecting package buildah 1.43.1-3

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93177 CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93141 CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-11

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93210 CVE-2026-56852 affecting package kata-containers for versions less than 3.32.0.kata0-1

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-56852

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

UBUNTU-CVE-2026-56852

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-56852 Infinite loop on invalid input in golang.org/x/text

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-56852

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-56852 Infinite loop on invalid input in golang.org/x/text

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-56852

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-56852

The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 bytes, as identified in CVE-2026-56852 . This vulnerability is linked to the golang.org/x/text library and affects several products, including containerd , docker , IBM Db2 Genius Hub , Agentics ,...

CVE-2026-56852

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-V245-V573-V5VM linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

Summary linkify-it's schema-scan loop .test / .match, the documented public API invokes the mailto: schema validator at every mailto: occurrence in the input text. For each occurrence the validator does text.slicepos an On copy and runs an email regex whose local-part class srcemailname greedily...

GHSA-V56Q-MH7H-F735 Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

Summary Listset, ListsetSize, ListsetIn, ListupdateIn and the functional set / setIn / updateIn mishandle an index or size in the range 2 30, 2 31: - On an empty List the operation enters an uncatchable infinite loop a tight CPU spin; a surrounding try/catch never regains control. Only killing th...

kernel: drm/xe/dma-buf: fix UAF with retry loop

A flaw was found in the Linux kernel, specifically within the drm/xe/dma-buf component. This Use-After-Free UAF vulnerability occurs due to an issue in a retry loop, where a buffer object is prematurely freed on error. An attacker could potentially exploit this to cause memory corruption, leading...

Security Bulletin: Multiple vulnerabilities within IBM HTTP Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within IBM HTTP Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-29167 DESCRIPTION: Use After Free vulnerability in Apache HTTP Server with modldap in per-directory configuration...

SUSE-SU-2026:22887-1 Security update for docker-compose

This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration bsc1239766. - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the...