2042 matches found
Astra Linux – Vulnerability in Golang 1.19, Golang 1.23
Due to the use of a variable time instruction in the assembly implementation of an internal function, a small number of bits from secret scalars are leaked on the ppc64le architecture. Given the way this function is used, we believe that this leakage is not sufficient to allow recovery of the...
Astra Linux – Vulnerability in golang-golang-x-net, golang-1.19
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, enough to trigger a denial of service due to a small number of small requests...
Astra Linux – Vulnerability in ruby-loofah
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah = 2.1.0; versions less than 2.19.1 are vulnerable to cross-site scripting due to the image/svg+xml media type in data URIs. This issue has been fixed in version 2.19.1...
Astra Linux – Vulnerability in Thunderbird
matrix-js-sdk is a client-server SDK for the Matrix messaging protocol, designed for JavaScript. In versions prior to 19.4.0, events sent with special strings in key locations could temporarily disrupt or hinder the proper functioning of matrix-js-sdk, potentially affecting the consumer’s ability...
Astra Linux - Vulnerability in Golang-1.19
A malicious HTTP/2 client that quickly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is limited by the http2.Server.MaxConcurrentStreams setting, resetting an ongoing request allows the attacker to create a new...
Astra Linux – Vulnerability in ruby-loofah
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah = 2.2.0; versions before 2.19.1 use recursion to sanitize CDATA sections, which can lead to stack exhaustion and raise a SystemStackError exception. This may result in ...
Astra Linux - Vulnerability in Golang-1.19
On Unix platforms, the Go runtime behaves differently when a binary is run with the setuid/setgid bits enabled. This can be dangerous in certain situations, such as when dumping memory state or assuming the status of standard I/O file descriptors. If a setuid/setgid binary is executed with standa...
EUVD-2026-44804
NocoBase backup restore schema name allows command injection...
ROOT-OS-DEBIAN-11-CVE-2019-8457 CVE-2019-8457 in db5.3 - Patched by Root
Root has patched CVE-2019-8457 in the db5.3 package for Root:Debian:11. Multiple fixed versions available...
EUVD-2026-54526
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
CVE-2026-20268
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CLSA-2026-1784596309 TuxCare security update for ms (19 CVEs)
TuxCare rebuilt ms to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1780707089 TuxCare security update for @angular (3 CVEs)
TuxCare rebuilt 19 @angular packages to address 3 CVEs. Fixed in 10.1.0-tuxcare.1...
CLSA-2026-1776731782 TuxCare security update for follow-redirects (19 CVEs)
TuxCare rebuilt follow-redirects to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1776904630 TuxCare security update for https-proxy-agent (19 CVEs)
TuxCare rebuilt https-proxy-agent to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1774484506 TuxCare security update for minimatch (19 CVEs)
TuxCare rebuilt minimatch to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1774743812 TuxCare security update for hawk (19 CVEs)
TuxCare rebuilt hawk to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...
CLSA-2026-1774570929 TuxCare security update for ejs (19 CVEs)
TuxCare rebuilt ejs to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...