30632 matches found
PT-2026-74837
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 3.3.4-tuxcare.1...
PT-2026-74510
TuxCare rebuilt socket.io-parser to address 4 CVEs. Fixed in 3.1.3-tuxcare.1...
PT-2026-75111
TuxCare rebuilt fast-xml-parser to address 7 CVEs. Fixed in 4.4.0-tuxcare.1...
PT-2026-75708
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.7-tuxcare.1...
PT-2026-75524
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.2-tuxcare.2...
PT-2026-75614
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 3.2.0-tuxcare.2...
PT-2026-74835
TuxCare rebuilt socket.io-parser to address 2 CVEs. Fixed in 3.4.3-tuxcare.1...
RHEL 8 : python3 (RHSA-2026:50065)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50065 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Important: python
Issue Overview: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 When...
Amazon Linux 2 : python3, --advisory ALAS2-2026-3852 (ALAS-2026-3852)
The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3852 advisory. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser...
Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-016 (ALASGIMP-2026-016)
The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-016 advisory. A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscannergettoken...
RHEL 8 : python3 (RHSA-2026:50064)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50064 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2026:3461-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3461-1 advisory. - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. -...
PT-2026-75102
TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 3.17.5-tuxcare.1...
PT-2026-74836
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 4.2.4-tuxcare.1...
CVE-2026-68494: Allocation of Resources Without Limits or Throttling
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...
PT-2026-74521
TuxCare rebuilt fast-xml-parser to address 4 CVEs. Fixed in 4.5.3-tuxcare.2...
PT-2026-67893
Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 3.6.6 OpenSIPS versions prior to 4.0.0-rc1 Description The find line delimiter function in the multipart body parser performs an out-of-bounds read via strncmp when searching for MIME boundary delimiters. This occurs...