CVE-2026-48734

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, a crafted MVG file could result in a stack overflow due to a missing depth or visited-set check. This issue has been patched in versions 6.9.13-49 and 7.1.2-24...

CVE-2026-45380

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, a one-byte off-by-one error in SafeOutPathBuilder::restoreSymlink allows an attacker to craft a .7z archive that, when extracted with bit7z on any non-Windows platform,...

CVE-2026-53464 ImageMagick: Memory Leak in wand option parser when providing invalid arguments

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25...

CVE-2026-53460

CVE-2026-53460 (ImageMagick) affects ImageMagick due to a missing check for maximum memory requests in AcquireAlignedMemory, which can trigger an out-of-Memory condition. Affected versions include pre-patch 6.9.13-50 and 7.1.2-25; patches fix in 6.9.13-50 and 7.1.2-25. The CVSS v3.1 base score is...

CVE-2026-34356 affecting package httpd for versions less than 2.4.68-1

CVE-2026-34356 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...

EUVD-2026-35701

Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks. This issue has been patched in version 5.55.7...

CVE-2026-49475 FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, a STUN packet whose declared attribute length is shorter than the structure the parser...

CVE-2025-1178 affecting package gdb for versions less than 13.2-9

CVE-2025-1178 affecting package gdb for versions less than 13.2-9. A patched version of the package is available...

CVE-2026-6357 affecting package python-pip for versions less than 24.2-8

CVE-2026-6357 affecting package python-pip for versions less than 24.2-8. A patched version of the package is available...

CVE-2026-4948 affecting package firewalld for versions less than 2.0.2-4

CVE-2026-4948 affecting package firewalld for versions less than 2.0.2-4. A patched version of the package is available...

CVE-2026-43895 affecting package jq for versions less than 1.7.1-6

CVE-2026-43895 affecting package jq for versions less than 1.7.1-6. A patched version of the package is available...

CVE-2026-43896 affecting package jq for versions less than 1.7.1-6

CVE-2026-43896 affecting package jq for versions less than 1.7.1-6. A patched version of the package is available...

CVE-2026-5172 affecting package dnsmasq for versions less than 2.92-1

CVE-2026-5172 affecting package dnsmasq for versions less than 2.92-1. A patched version of the package is available...

CVE-2026-2291 affecting package dnsmasq for versions less than 2.92-1

CVE-2026-2291 affecting package dnsmasq for versions less than 2.92-1. A patched version of the package is available...

CVE-2026-33814 affecting package packer for versions less than 1.9.5-15

CVE-2026-33814 affecting package packer for versions less than 1.9.5-15. A patched version of the package is available...

CVE-2026-39821 affecting package vitess for versions less than 19.0.4-10

CVE-2026-39821 affecting package vitess for versions less than 19.0.4-10. A patched version of the package is available...

CVE-2026-39830 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39830 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25

CVE-2026-39830 affecting package kubernetes for versions less than 1.30.10-25. A patched version of the package is available...

CVE-2026-39821 affecting package moby-engine for versions less than 25.0.3-18

CVE-2026-39821 affecting package moby-engine for versions less than 25.0.3-18. A patched version of the package is available...

CVE-2024-40646

Vertex is a management tool for PT (Private Tracker) users. CVE-2024-40646 describes a path traversal vulnerability in Vertex versions prior to commit fbde301b97986d5913fc4bc95f5445750d282e11. A patch is included in versions containing that commit; upgrading to that version mitigates the issue. C...