450 matches found
CLEANSTART-2024-BX28522 musl libc through 1
Security vulnerability affects the musl package. musl libc through 1...
CVE-2026-6042-PoC
CVE-2026-6042: Algorithmic Complexity DoS in musl libc iconv Gap-skipping loops in musl's iconv GB18030 4-byte decoder allow a small crafted input to consume disproportionate CPU time. A 40 KB adversarial payload can pin a CPU core for over 40 minutes. Advisory :...
CVE-2021-4034
CVE-2021-4034 Precompiled builds for CVE-2021-4034. Of course you shouldn't trust precompiled builds : This release works slightly different: first a minimal shared object is created. This object is packaged into the main binary and dropped upon execution. Musl is used for compilation to minimize...
Linux Distros Unpatched Vulnerability : CVE-2026-107891
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - musl - None Ubuntu Linux - Unknown description CVE-2026-107891 Note that Nessus relies on the presence of the package as reported by the vendor...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the bundled Brotli decoder, specifically DecodeBlockTypeAndLength in decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream with an...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the bundled Brotli decoder, specifically DecodeBlockTypeAndLength in decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream with an...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the bundled Brotli decoder, specifically DecodeBlockTypeAndLength in decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream with an...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the bundled Brotli decoder, specifically DecodeBlockTypeAndLength in decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream with an...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the bundled Brotli decoder, specifically DecodeBlockTypeAndLength in decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream with an...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the bundled Brotli decoder, specifically DecodeBlockTypeAndLength in decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream with an...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the bundled Brotli decoder, specifically DecodeBlockTypeAndLength in decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream with an...
@fallow-cli/fallow-node (>=3.0.0, <=3.33.1) potentially affected by CVE-2026-115569 via @fallow-cli/fallow-node-linux-x64-musl (>=3.0.0, <=3.33.1)
@fallow-cli/fallow-node-linux-x64-musl NPM version =3.0.0, =3.0.0, =3.33.1 Source cves: CVE-2026-115569 Source advisory: MEND:CVE-2026-115569...
@fallow-cli/fallow-node (>=3.0.0, <=3.33.1) potentially affected by CVE-2026-115569 via @fallow-cli/fallow-node-linux-arm64-musl (>=3.0.0, <=3.33.1)
@fallow-cli/fallow-node-linux-arm64-musl NPM version =3.0.0, =3.0.0, =3.33.1 Source cves: CVE-2026-115569 Source advisory: MEND:CVE-2026-115569...
code-shame (>=0.2.0, <=0.2.1), fallow (>=3.0.0, <=3.33.1) +1 more potentially affected by CVE-2026-115569 via @fallow-cli/linux-x64-musl (>=3.0.0, <=3.33.1)
@fallow-cli/linux-x64-musl NPM version =3.0.0, =0.2.0, =3.0.0, =1.19.2, =1.24.4 Source cves: CVE-2026-115569 Source advisory: MEND:CVE-2026-115569...
code-shame (>=0.2.0, <=0.2.1), fallow (>=3.0.0, <=3.33.1) +1 more potentially affected by CVE-2026-115569 via @fallow-cli/linux-arm64-musl (>=3.0.0, <=3.33.1)
@fallow-cli/linux-arm64-musl NPM version =3.0.0, =0.2.0, =3.0.0, =1.19.2, =1.24.4 Source cves: CVE-2026-115569 Source advisory: MEND:CVE-2026-115569...
PT-2026-120764
Not to miss out on all the fun, musl also has a remote-code execution bug CVE-2026-107891. C was a mistake...
CLSA-2026-1792161075 TuxCare security update for @rollup/rollup-linux-x64-musl (1 CVE)
TuxCare rebuilt @rollup/rollup-linux-x64-musl to address 1 CVE. Fixed in 4.22.4-tuxcare.1...
CLSA-2026-1792161068 TuxCare security update for @rollup/rollup-linux-arm64-musl (1 CVE)
TuxCare rebuilt @rollup/rollup-linux-arm64-musl to address 1 CVE. Fixed in 4.22.4-tuxcare.1...