CLEANSTART-2026-OS54288 fast-uri is a URI parser for Node

Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...

CLEANSTART-2026-KE27596 js-yaml is a JavaScript YAML parser and dumper

CVE-2026-84375 affects multiple packages. js-yaml is a JavaScript YAML parser and dumper. See references for individual vulnerability details...

CLEANSTART-2026-SC57620 Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1

Security vulnerability affects the elasticsearch package. Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1...

CLEANSTART-2026-NW68824 Impact: In body-parser versions prior to 1

Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...

CLEANSTART-2026-KQ19093 flatted is a circular JSON parser

Security vulnerability affects the argo-workflows package. flatted is a circular JSON parser...

CLEANSTART-2026-RI71860 js-yaml is a JavaScript YAML parser and dumper

Security vulnerability affects the argo-workflows package. js-yaml is a JavaScript YAML parser and dumper...

CLEANSTART-2026-GT01967 non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters)

CVE-2026-18401 affects multiple packages. The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. See references for individual vulnerability details...

CLEANSTART-2026-SB96942 flatted is a circular JSON parser

Security vulnerability affects the argo-workflows package. flatted is a circular JSON parser...

CLEANSTART-2026-HH21892 sqlparse is a non-validating SQL parser module for Python

CVE-2026-71491 affects multiple packages. sqlparse is a non-validating SQL parser module for Python. See references for individual vulnerability details...

CLEANSTART-2026-VD54989 sqlparse is a non-validating SQL parser module for Python

CVE-2026-59893 affects multiple packages. sqlparse is a non-validating SQL parser module for Python. See references for individual vulnerability details...

CLEANSTART-2026-XN67293 sqlparse is a non-validating SQL parser module for Python

CVE-2026-54284 affects multiple packages. sqlparse is a non-validating SQL parser module for Python. See references for individual vulnerability details...

CLEANSTART-2026-FL97476 jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor

Security vulnerability affects the spark-sc212-jdk17-py311 package. jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...

CVE-2026-101279

A security vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The flaw is located in the DMARC Parser component, specifically within an unknown function in the file libopendmarc/opendmarc_policy.c. The root cause is an integer overflow triggered by the manipulation of ...

CVE-2026-101279 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

EUVD-2026-88594

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101279

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

glib2 security update

2.56.1-9.0.9 - Backport fix for CVE-2026-15588 Orabug: 39995948 - Backport fix for CVE-2026-58010 Orabug: 39995948 - Backport fix for CVE-2026-58011 Orabug: 39995948 - Backport fix for CVE-2026-58012 Orabug: 39995948 - Backport fix for CVE-2026-58013 Orabug: 39995948 - Backport fix for...

CVE-2026-101354: Stack-based Buffer Overflow

A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...

PT-2026-102796

Mounting an attacker-controlled NAND flash image lx nand flash open triggers an unbounded out-of-bounds heap write in LevelX's NAND flash-translation-layer metadata parser that overwrites a driver function pointer in the control block, giving a demonstrated control-flow hijack — RIP set to a full...