PT-2026-28588

Name of the Vulnerable Software and Affected Versions locutus versions 2.0.39 through 3.0.24 Description A prototype pollution issue exists in the parse str function of the npm package locutus. An attacker can manipulate Object.prototype by overriding RegExp.prototype.test and then providing a...

Prototype Pollution

Overview locutus is a Locutus other languages' stadard libraries to JavaScript for fun and educational purposes Affected versions of this package are vulnerable to Prototype Pollution via the locutus.php.strings.parsestr function. An attacker can modify the prototype of global objects by supplyin...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000509 advisory. An issue was discovered in the Linux kernel through 5.6.2. mpolparsestr in mm/mempolicy.c has a stack- based out-of-bounds write because an empty nodelist is...

PT-2021-7864

Name of the Vulnerable Software and Affected Versions ezXML version 0.8.6 Description The issue is related to incorrect memory handling by the ezxml parse str function when parsing crafted XML files, which can lead to writing outside a memory region created by mmap. Additionally, the vulnerabilit...

PT-2021-7865

Name of the Vulnerable Software and Affected Versions ezXML version 0.8.6 Description The issue is related to the ezxml parse str function in the ezXML library, which performs incorrect memory handling while parsing crafted XML files, leading to an out-of-bounds read after a certain strcspn...

kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c

An out-of-bounds write flaw was found in the Linux kernel. An empty nodelist in mempolicy.c is mishandled durig mount option parsing leading to a stack-based out-of-bounds write. The highest threat from this vulnerability is to system availability...

PT-2020-2318 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.6.2 Description: The issue is related to a stack-based out-of-bounds write in the mpol parse str function in mm/mempolicy.c due to mishandling of an empty nodelist during mount option parsing. This could...

PT-2019-6361

Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.2 through 0.8.6 Description The issue is related to errors in handling pointers in the ezxml str2utf8 and ezxml parse str functions within the ezxml.c component of the ezXML library for parsing XML documents. This can lead t...