168361 matches found
CVE-2026-56289
A flaw was found in GNU patch. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted patch file. The improper validation of hunk single block of changes in diff line offsets in unified-diff input can lead to an effectively infinite processin...
CVE-2026-56288
A flaw was found in GNU patch. An attacker can exploit this by providing a specially crafted patch file, which leads to a NULL pointer dereference. This improper handling of end-of-file markers can corrupt internal data structures, causing the utility to crash. This results in a denial of service...
CVE-2026-67217
A flaw was found in cJSON. The library applies RFC 6902 JSON Patch operations non-atomically. A remote attacker, by supplying a specially crafted patch document e.g., a 'replace' operation missing its value or a 'move' operation with an unresolved destination, can cause the existing target data t...
CVE-2026-67215
A flaw was found in cJSON. A remote attacker can exploit this vulnerability by applying a specially crafted JSON Patch document that causes uncontrolled recursion, leading to stack exhaustion. This can result in a denial of service DoS by crashing the application. Mitigation To reduce the risk of...
ROOT-APP-PYPI-CVE-2025-4565 CVE-2025-4565 in protobuf - Patched by Root
Root has patched CVE-2025-4565 in the protobuf package for Root:PyPI. Multiple fixed versions available...
CVE-2026-62940
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...
CVE-2026-63343
Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a metadata.yaml symlink pointing to an arbitrary host path allows an authenticated Incus user to read or overwrite any file on the host as root via the instance metadata API. The...
ROOT-APP-PYPI-CVE-2025-53643 CVE-2025-53643 in aiohttp - Patched by Root
Root has patched CVE-2025-53643 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69227 CVE-2025-69227 in aiohttp - Patched by Root
Root has patched CVE-2025-69227 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-50269 CVE-2026-50269 in aiohttp - Patched by Root
Root has patched CVE-2026-50269 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34518 CVE-2026-34518 in aiohttp - Patched by Root
Root has patched CVE-2026-34518 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34516 CVE-2026-34516 in aiohttp - Patched by Root
Root has patched CVE-2026-34516 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34517 CVE-2026-34517 in aiohttp - Patched by Root
Root has patched CVE-2026-34517 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69244 CVE-2026-69244 in aiohttp - Patched by Root
Root has patched CVE-2026-69244 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-32882 CVE-2026-32882 in libheif - Patched by Root
Root has patched CVE-2026-32882 in the libheif package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-49271 CVE-2026-49271 in libheif - Patched by Root
Root has patched CVE-2026-49271 in the libheif package for Root:Debian:11. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-30359 CVE-2025-30359 in webpack-dev-server - Patched by Root
Root has patched CVE-2025-30359 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9595 CVE-2026-9595 in webpack-dev-server - Patched by Root
Root has patched CVE-2026-9595 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...