CVE-2026-42214 Improper Control of Generation of Code ('Code Injection') in dail8859/NotepadNext

Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext's detectLanguageFromExtension function interpolates a file's extension directly into a Lua script without sanitization. An attacker can craft a filename whose extension contains Lua code, which...

PT-2026-33994

Name of the Vulnerable Software and Affected Versions Net::Dropbear versions prior to 0.14 Description Net::Dropbear for Perl contains a vulnerable version of libtomcrypt, specifically including versions of Dropbear 2019.78 or earlier. Recommendations Update Net::Dropbear to version 0.14 or later...