31912 matches found
[SECURITY] Fedora 44 Update: python-mistune-3.2.1-1.fc44
The fastest markdown parser in pure Python, inspired by marked...
Debian dla-4655 : libhtml-parser-perl - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4655 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4655-1 [email protected] https://www.debian.org/lts/security/...
PT-2026-53114
Name of the Vulnerable Software and Affected Versions ANTLR4 versions prior to 4.13.3 Description An issue exists in the tokenVocab Grammar Option Handler where the getImportedVocabFile function in the tool/src/org/antlr/v4/parse/TokenVocabParser.java file is susceptible to path traversal. This...
PT-2026-56523
The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes see the referenced issue. Alternatives - skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" fontations project...
Linux Distros Unpatched Vulnerability : CVE-2026-53172
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix IFM region index out-of-bounds in command stream parser NPUSETIFMREGION...
Linux Distros Unpatched Vulnerability : CVE-2026-53182
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: nl80211: reject oversized EMA RNR lists nl80211parsernrelems stores the parsed element count in a u8-backed cfg80211rnrelems::cnt field and uses that coun...
Linux Distros Unpatched Vulnerability : CVE-2026-56123
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap...
Linux Distros Unpatched Vulnerability : CVE-2026-53245
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/802/mrp: fix vector attribute parsing in mrppduparsevecattr In mrppduparsevecattr, vector attribute events are encoded three per byte and valen tracks the...
Linux Distros Unpatched Vulnerability : CVE-2026-13503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file...
rxrpc: Fix the ACK parser to extract the SACK table for parsing
...
radvdump's Route Information Option Parser has a Stack Buffer Overflow
...
sakura-theme-sqli-cve
CVE-2026-XXXXX Unauthenticated SQL Injection in Sakura Wor...
EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2466)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...
EUVD-2026-36191
ImageMagick: Memory Leak in wand option parser when providing invalid arguments...
ImageMagick: Memory Leak in wand option parser when providing invalid arguments
When providing invalid options to the wand option parser a small memory leak will occur...
GHSA-J989-F892-2335 ImageMagick: Memory Leak in wand option parser when providing invalid arguments
When providing invalid options to the wand option parser a small memory leak will occur...
NPM: js-toml has silent type confusion via falsy-primitive duplicate-key bypass
NPM: js-toml has silent type confusion via falsy-primitive duplicate-key bypass vulnerability discovered by ? in WordPress Npm js-toml versions = 1.1.1...
Incorrect Comparison
Overview js-toml is an A TOML parser for JavaScript/TypeScript, targeting TOML 1.0.0 Spec Affected versions of this package are vulnerable to Incorrect Comparison via the load process. An attacker can manipulate configuration values by supplying specially crafted TOML input that uses duplicate ke...
GHSA-M34P-749J-X6M6 js-toml has silent type confusion via falsy-primitive duplicate-key bypass
Summary js-toml's interpreter checks whether a key already exists in a parser-built container with if objectkey instead of if key in object. When the prior value is a falsy primitive — false, 0, 0n, 0.0, -0, or "" — the duplicate-key branch is skipped and the value is silently overwritten by a...