255316 matches found
CVE-2026-59141 Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdx_find_locked
Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdxfindlocked. The attach-time validator rdxvalidateheader checks the header scalars and region layout against the file size, but does not validate the node records it then...
CVE-2026-59140
Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths. The attach-time validator ssvalidateheader bounds only the root index against the node pool nodecapacity. The order-statistics and min/max queries th...
CVE-2026-59140
CVE-2026-59140 affects Data::SortedSet::Shared
EUVD-2026-42315
Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set...
GHSA-FRVP-7C67-39W9 Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
The same as the hono core Path traversal in serve-static on Windows via encoded backslash %5C. Summary On Windows hosts, an encoded backslash %5C in the request path decodes to , which the Windows path resolver treats as a separator. serve-static then resolves a single URL segment such as...
MAL-2026-10984 Malicious code in veskra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85333fa48c61a31c9f7be395bdc5ef70596e317a3bc9124f67ece4ffcf96901 [email protected] contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetching remote content, no...
MAL-2026-10980 Malicious code in nolby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8bc0fa5eb23a45d27933ce1d32b7fabed27182039e170dbcaa38c0462dfa20 The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invokes a top-level sync on modu...
OPENSUSE-SU-2026:21399-1 Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions
This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues: Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global prototyp...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, saf, actions-runner, npm, kibana, graalvm, opensearch-dashboards-fips, prism, gitlab-rails-ce-fips, gitlab-rails-ce, code-server, wazuh-dashboard-fips, sqlpad, pulumi, opensearch-dashboards, homepage, kubeflow-centraldashboard, lerna...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, saf, actions-runner, npm, kibana, graalvm, opensearch-dashboards-fips, prism, gitlab-rails-ce-fips, gitlab-rails-ce, code-server, wazuh-dashboard-fips, sqlpad, pulumi, opensearch-dashboards, homepage, kubeflow-centraldashboard, lerna...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, saf, actions-runner, npm, kibana, graalvm, opensearch-dashboards-fips, prism, gitlab-rails-ce-fips, gitlab-rails-ce, code-server, wazuh-dashboard-fips, sqlpad, pulumi, opensearch-dashboards, homepage, kubeflow-centraldashboard, lerna...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, saf, actions-runner, npm, kibana, graalvm, opensearch-dashboards-fips, prism, gitlab-rails-ce-fips, gitlab-rails-ce, code-server, wazuh-dashboard-fips, sqlpad, pulumi, opensearch-dashboards, kubeflow-centraldashboard, lerna...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: prism, lerna, pulumi, saf, kubeflow-centraldashboard, npm, sqlpad, code-server...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: prism, lerna, pulumi, saf, kubeflow-centraldashboard, npm, sqlpad, code-server...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: prism, lerna, pulumi, saf, kubeflow-centraldashboard, npm, sqlpad, code-server...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: prism, lerna, pulumi, saf, kubeflow-centraldashboard, npm, sqlpad, code-server...
Malicious code in react-tabulix-virtual (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...
SUSE CVE-2026-64022
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the la...
SUSE CVE-2026-64096
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orignode RCU release batadvmcastpurgeorig removes entries from RCU-protected hlists but does not wait for an RCU grace period before returning. Concurrent RCU readers may still accesses...
SUSE CVE-2026-64161
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix ethportsnode leak in probe The error path on ofpropertyreadu32 failure inside icssmpruethprobe returns without putting ethportsnode, which was acquired before the foreachchildofnode loop. Drop it before...