31909 matches found
PT-2026-53193
Name of the Vulnerable Software and Affected Versions GPAC versions prior to 26.02.1 Description A buffer overflow exists in the ISOBMFF Parser component within the src/utils/base encoding.c file. A local attacker can execute a manipulation involving highly compressed data to trigger this issue...
CVE-2026-13523: Improper Handling of Highly Compressed Data (Data Amplification)
A weakness has been identified in GPAC up to 26.02.0. This affects an unknown part of the file src/utils/baseencoding.c of the component ISOBMFF Parser. Executing a manipulation can lead to highly compressed data. The attack needs to be launched locally. The exploit has been made available to the...
PT-2026-53633
In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage service host as the user the Vitrage service runs under. This may result in unauthorized access to the host and further compromise...
PT-2026-53307
Name of the Vulnerable Software and Affected Versions seladb PcapPlusPlus version 25.05 Description A heap-based buffer overflow exists in the LightPcapNg Parser component within the parse by block type function of the light pcapng.c file. This issue occurs when the captured packet length argumen...
html-react-parser PostgreSQL XSS
The vulnerability of the html-react-parser tool used in pgAdmin 4 database management software is related to incorrect data encoding or filtering. Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks remotely...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the Parser class. An attacker can cause a stack overflow or excessive memory consumption by supplying deeply nested CSS blocks or functions. Remediation Upgrade crass to version 1.0.7 or higher. References -...
CVE-2026-13503
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...
UBUNTU-CVE-2026-13503
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...
CVE-2026-13503
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...
EUVD-2026-40001
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...
CVE-2026-13503
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...
CVE-2026-13503 antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal
A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...
`ttf-parser` is unmaintained
The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes see the referenced issue. Alternatives - skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" fontations project...
RUSTSEC-2026-0192 `ttf-parser` is unmaintained
The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes see the referenced issue. Alternatives - skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" fontations project...
aabb_physics (>=0.1.0, <=0.1.1), aad (>=0.2.1, <=0.9.0) +1961 more potentially affected by unknown CVE via ttf-parser (>=0.1.0, <=0.25.1)
ttf-parser CARGO version =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.11.0, =0.9.0, =0.1.0, =0.0.2, =0.1.2, =0.1.1, =0.1.26, =0.1.23, =0.1.9, =0.2.0, =0.0.10, =0.0.18 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0192...
[SECURITY] [DLA 4655-1] libhtml-parser-perl security update
Debian LTS Advisory DLA-4655-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin June 28, 2026 https://wiki.debian.org/LTS Package : libhtml-parser-perl Version : 3.75-1+deb11u1 CVE ID : CVE-2026-8829 Paul Johnson discovered that libhtml-parser-perl, a collection of...
[SECURITY] Fedora 43 Update: python-mistune-3.2.1-1.fc43
The fastest markdown parser in pure Python, inspired by marked...
[SECURITY] Fedora 44 Update: python-mistune-3.2.1-1.fc44
The fastest markdown parser in pure Python, inspired by marked...
PT-2026-53114
Name of the Vulnerable Software and Affected Versions ANTLR4 versions prior to 4.13.3 Description An issue exists in the tokenVocab Grammar Option Handler where the getImportedVocabFile function in the tool/src/org/antlr/v4/parse/TokenVocabParser.java file is susceptible to path traversal. This...
PT-2026-56523
The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes see the referenced issue. Alternatives - skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" fontations project...