CVE-2026-19140: Use After Free

Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19172: Use After Free

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-19146: Use of Uninitialized Variable

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-19173: Out-of-bounds Write

Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-68722

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in the UI allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achieved...

PT-2026-68686

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in Resources. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a...

EulerOS 2.0 SP15 : krb5 (EulerOS-SA-2026-2931)

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gssacceptseccontext...

CVE-2026-71320

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...

CVE-2026-71320 Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...

CVE-2026-71320 Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...

EUVD-2026-53649

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /nuxtisland/ props into a dynamic component when vue.runtimeCompiler: true is enabled, causing template execution in the Nitro process. This issue is fixe...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via improper normalization of object keys containing dot-dot segments in the S3 serving process. An attacker can access or modify files outside the intended bucket directory but within the configured serve root by...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the getTusLocationOrRetry function when a transport failure occurs during the initial Infinite Scale TUS creation POST, resulting in a nil HTTP response that is dereferenced before error handling. An attacker...

CVE-2026-48617

A flaw was found in Node.js. This vulnerability allows a bypass of the Permission Model enforcement due to path misvalidation within the process.report.writeReport function. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access to...

CVE-2026-9196

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backend during validation prior to user...

Malicious code in dolyame-boxy-mobile-bnpl-footer (npm)

Source: amazon-inspector 5eebb51211941909f17f499585ebb631497d8d82d142a5610518b55b87b144fb The package's main entry index.js requires./compat, which at import time downloads a platform-specific executable from author-controlled endpoints assembled at runtime by joining string arrays:...

Malicious code in uzair-rajput-new (npm)

Source: amazon-inspector 70070ac11c08aa4d23d214d9539b96f97c6bd6eaa56bb6561160d02bd6d52632 The CJS entry dist/index.cjs assembles a scrypt password by XOR-deobfuscating three sibling byte arrays a.cjs, b.cjs, c.cjs with distinct constants 17, 91, 53, uses that key with...

CVE-2026-9196

IBM Langflow OSS 1.0.0–1.10.3 is affected by an authenticated code-execution risk during Agentic Assistant validation caused by improper handling of LLM-generated components. The backend may execute model-generated Python code in the validation step before user approval, enabling an attacker to t...

JLSEC-2026-1166 Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access

Summary In Deno, environment access is gated by the env permission. You can deny it with --deny-env, or restrict it to a specific allowlist with --allow-env=FOO,BAR. The expectation is that a program running without env permission cannot change process.env. process.loadEnvFile the Node-compatible...

CVE-2026-70427

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of .tar and .tar.gz archives, allowing attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary...