CVE-2026-78070

creationtimestamp| type| source ---|---|--- 2026-09-03 22:00:06+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4 2026-09-04 00:00:11+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4...

CVE-2026-64197

CVE-2026-64197 is an out-of-bounds write vulnerability in DASYLab (National Instruments), caused by improper validation of user-supplied data during parsing of .DSB files , resulting in a write past the end of an allocated data structure. Exploitation requires a user to open a specially crafted ....

CVE-2026-64197 Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all...

CVE-2026-64196 Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions...

CVE-2026-64196

DASYLab (NI/MeasurementX) contains an out-of-bounds heap write vulnerability caused by improper validation of user-supplied data during parsing of .DSB files. Successful exploitation requires a local attacker to get a user to open a specially crafted file, yielding High impact on confidentiality,...

CVE-2026-64195

CVE-2026-64195 is an out-of-bounds write vulnerability in DASYLab (by MEAS X), caused by insufficient validation of user-supplied data when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted .DSB file. All versions before 2026.0.0 are affected; updating to 2...

CVE-2026-64195 Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0...

AZL-99084 CVE-2026-85062 affecting package colord 1.4.6-1

Colord is a tiny yet powerful tool for high-performance color manipulations and conversions. Prior to 2.9.4, synchronous CSS color string matchers in src/colorModels/rgbString.ts, src/colorModels/hslString.ts, src/colorModels/hwbString.ts, src/colorModels/lchString.ts, and...

CVE-2026-77465

toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue, peg$parsearray, and peg$parseinlinetableentry functions recurse through nested arrays and inline tables without a depth...

CVE-2026-71429

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full path string from the nesting stack for every checkable token...

CVE-2026-77465

creationtimestamp| type| source ---|---|--- 2026-09-03 21:05:03+00:00| seen| https://gist.github.com/alon710/aeca88a9cadc2c33877b37b541208edc 2026-09-03 22:35:11+00:00| published-proof-of-concept| https://github.com/BinaryMuse/toml-node/security/advisories/GHSA-82x6-q7mm-w9cf 2026-09-03...

toml-node: Uncontrolled Recursion

Summary toml.parse crashes with an uncaught RangeError: Maximum call stack size exceeded when parsing deeply nested arrays or inline tables. The parser is generated by Peggy 5.1.0 a PEG parser generator as a recursive-descent parser; the value rule mutually recurses with the array and inline-tabl...

CVE-2026-71429

A flaw was found in stream-json. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, deeply nested JSON document. The library's path filters, such as pick and ignore, inefficiently process these structures, leading to excessive resource...

CVE-2026-82520 parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments

parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a...

CVE-2026-82520

parsedmarc before 11.0.1 is vulnerable to a Zip Bomb Denial of Service via compressed email attachments. The root cause is that parsedmarc decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incomin...

CVE-2026-82520 parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments

parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a...

CVE-2026-73222

creationtimestamp| type| source ---|---|--- 2026-09-03 20:35:04+00:00| published-proof-of-concept| https://github.com/davila7/claude-code-templates/security/advisories/GHSA-79wm-x847-7cvg...

CVE-2026-63376

toml-node , a TOML parser for Node.js and the browser, is affected by a prototype pollution vulnerability in toml.parse() (lib/compiler.js) prior to version 4.1.2. The root cause is a key-path desynchronization : currentPath tracking uses both arrays and strings, so valueAssignments records a com...

EUVD-2026-42049

Phoenix: Unbounded channel joins per transport enables DoS over few connections...

Phoenix: Unbounded channel joins per transport enables DoS over few connections

Summary Phoenix transports do not limit the number of channels in a given connection, making it easy to spawn hundreds of thousands of processes over a single connection, and, eventually reaching the max processes VM limit. The solution is to limit the number of channels per transport, so an...