Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.18. It arises when threads exit via BINDERTHREADEXIT, causing pending work items to be canceled. This results in a loss of node reference count updates, leading to asynchronous updates between node delivery status and count status...

UBUNTU-CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449

The symfony/expression-language component is vulnerable to a Denial of Service (DoS) attack due to unbounded nesting in its expression parser. Specifically, expressions containing tens of thousands of nested unary operators, array literals, binary operators, or property accesses can cause the PHP...

CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

CVE-2026-109449 Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

Missing Authorization

Overview Umbraco.Cms.Api.Delivery is a presentation layer for the Umbraco CMS Delivery API. Affected versions of this package are vulnerable to Missing Authorization in the Content Delivery API, which enforces Public Access protection only on directly requested nodes, expanding Content Picker and...

Missing Authorization

Overview Umbraco.Cms.Web.Common is a package containing the web assembly needed to run Umbraco CMS. Affected versions of this package are vulnerable to Missing Authorization in the Content Delivery API, which enforces Public Access protection only on directly requested nodes, expanding Content...

CVE-2026-69197

Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requested node but not to referenced nodes serialized through Content Picker or Multi-Node Tree Picker properties, including pickers nested in Block...

PT-2026-94380

Name of the Vulnerable Software and Affected Versions Umbraco versions prior to 13.15.1 Umbraco versions prior to 17.5.3 Umbraco versions prior to 18.0.2 Description The Content Delivery API fails to apply member and Public Access checks to referenced nodes serialized through Content Picker or...

CVE-2026-69197: Exposure of Sensitive Information to an Unauthorized Actor

Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requested node but not to referenced nodes serialized through Content Picker or Multi-Node Tree Picker properties, including pickers nested in Block...

EUVD-2011-1447

Malware in sbrugna...

SUSE CVE-2011-1442

Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service node tree corruption or possibly have unspecified other impact via unknown vectors...

PT-2022-37266 · Apache · Apache Commons Configuration2

Name of the Vulnerable Software and Affected Versions: Apache Commons Configuration2 affected versions not specified Description: The issue is related to a security exception in the java.util.Collections$UnmodifiableCollection.forEach method, which is called by...

CVE-2011-1442

Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service node tree corruption or possibly have unspecified other impact via unknown vectors...

CVE-2011-1442

Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service node tree corruption or possibly have unspecified other impact via unknown vectors...

CVE-2011-1442

CVE-2011-1442 affects Google Chrome prior to 11.0.696.57. The vulnerability stems from improper handling of mutation events, allowing remote attackers to cause a denial of service (node tree corruption) or possibly other impact via unknown vectors. The connected documents provide corroborating Ch...

CVE-2011-1442

Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service node tree corruption or possibly have unspecified other impact via unknown vectors...

CVE-2011-1442

Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service node tree corruption or possibly have unspecified other impact via unknown vectors...