Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

112 matches found

osv_cleanstart
osv_cleanstart•added 2026/10/15 12:41 a.m.•7 views

CLEANSTART-2026-EL02085 norm

CVE-2026-56852 affects multiple packages. A norm. See references for individual vulnerability details...

7.5CVSS6.2AI score0.00475EPSS
SaveExploits0References3
Kitploit
Kitploit•added 2026/10/10 9:11 a.m.•22 views

NORM-EDR

NORM-EDR NORM Normal EDR is an experimental kernel-mode EDR research project focused on explainable detection rather than silent blocking. Instead of assigning scores or killing processes, NORM answers one question: Why does this binary look suspicious? This project is built step-by-step in publi...

6.2AI score
SaveExploits0
Packet Storm News
Packet Storm News•added 2026/09/28 12:00 a.m.•14 views

An Operator-Norm Approach to Security with Quantum Advice

Non-uniform security allows an adversary to receive bounded advice about an oracle before attempting a fresh challenge. This captures the most realistic attacks and has already been studied extensively in prior work. In this work, we introduce an operator-norm approach for non-uniform security in...

5.7AI score
SaveExploits0
SUSE Linux
SUSE Linux•added 2026/09/03 1:33 p.m.•19 views

Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issue: CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of truncated/invalid UTF-8 input can lead to infinite loop bsc1271995. Patch Instructions: To install this SUSE update use the SUSE recommended...

6CVSS6.8AI score0.00475EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus•added 2026/08/06 12:00 a.m.•20 views

SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2026:3496-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3496-1 advisory. This update for google-osconfig-agent fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of input...

7.5CVSS6.5AI score0.00475EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE•added 2026/08/05 11:27 a.m.•38 views

CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.5CVSS6.5AI score0.00475EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux•added 2026/08/04 4:18 p.m.•25 views

Security update for google-guest-agent

This update for google-guest-agent fixes the following issue: CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of input containing invalid UTF-8 bytes can lead to infinite loop bsc1272118. Patch Instructions: To install this SUSE update use the SUSE recommended installation metho...

6CVSS5.5AI score0.00475EPSS
SaveExploits0References4
osv_suse
osv_suse•added 2026/07/31 6:33 p.m.•15 views

SUSE-SU-2026:3439-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of inpu...

9.6CVSS6.2AI score0.00692EPSS
SaveExploits0References5
osv_suse
osv_suse•added 2026/07/31 9:29 a.m.•18 views

SUSE-SU-2026:23073-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of...

9.6CVSS6.2AI score0.00692EPSS
SaveExploits0References5
osv_opensuse
osv_opensuse•added 2026/07/29 9:24 a.m.•14 views

OPENSUSE-SU-2026:21499-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip using PRoot to preserve file ownership and print an INFO message. Bind getopt from the host when usi...

9.6CVSS6.1AI score0.00692EPSS
SaveExploits0References4
osv_opensuse
osv_opensuse•added 2026/07/29 5:40 a.m.•16 views

OPENSUSE-SU-2026:21476-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of inp...

9.6CVSS6.2AI score0.00692EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux•added 2026/07/27 11:35 p.m.•21 views

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.5CVSS6.1AI score0.00475EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux•added 2026/07/23 1:03 p.m.•20 views

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.5CVSS6.1AI score0.00475EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux•added 2026/07/23 11:46 a.m.•24 views

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.5CVSS6.1AI score0.00475EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux•added 2026/07/23 11:20 a.m.•18 views

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.5CVSS6.1AI score0.00475EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux•added 2026/07/23 3:29 a.m.•22 views

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.5CVSS6.1AI score0.00475EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux•added 2026/07/23 3:07 a.m.•19 views

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.5CVSS6.1AI score0.00475EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux•added 2026/07/23 3:03 a.m.•19 views

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

7.5CVSS6.1AI score0.00475EPSS
SaveExploits0References7
Snyk
Snyk•added 2026/07/23 1:07 a.m.•16 views

Malicious Package

Overview lychee-norm-cache is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages•added 2026/07/23 1:07 a.m.•37 views

Malicious code in lychee-norm-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ee684fa7edabc6e34aedc6e32e36c42fb68100a69908227e639d53592565de lychee-norm-cache is a dependency-confusion proof-of-concept that provides no functional utility. Its bin script POSTs a small JSON payload containin...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder