fr.enedis.chutney:action-impl (5.0.0), fr.enedis.chutney:chutney-kotlin-dsl (5.0.0) +6 more potentially affected by CVE-2026-92550 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92550 Source advisory: SNYK:JAVA-ORGAPACHEQPID-20186794...

Memory Allocation with Excessive Size Value

Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value due to improper handling of type size and count in the AMQP 0-8/0-9/0-9-1 decoder. ...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2026-92560 via org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92560 Source advisory: SNYK:JAVA-ORGAPACHEQPID-20186795...

fr.enedis.chutney:action-impl (5.0.0), fr.enedis.chutney:chutney-kotlin-dsl (5.0.0) +6 more potentially affected by CVE-2026-92564 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92564 Source advisory: SNYK:JAVA-ORGAPACHEQPID-20186796...

Uncontrolled Recursion

Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting of types in the field-table processing. An attacker can cause a stack overflow...

Allocation of Resources Without Limits or Throttling

Overview org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol is a maven plugin for AMQP 0-10 protocol broker. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via improper handling of type size and count in the AMQP 0-10 decoder. An...

CVE-2026-80430

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

DEBIAN-CVE-2026-80430

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

CVE-2026-80431

The kitty terminal (versions 0.40.0 to before 0.49.0 ) contains an out-of-bounds write vulnerability in the natural width branch of the text sizing protocol. The root cause is located in screen_handle_multicell_command() within kitty/screen.c, where the application appends codepoints to a fixed-s...

CVE-2026-80431 Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process

Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 before 0.49.0 allows a program writing to the terminal to write past the end of a fixed-size buffer, because screenhandlemulticellcommand in kitty/screen.c appends each codepoint of a grapheme cluster...

CVE-2026-80431 Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process

Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 before 0.49.0 allows a program writing to the terminal to write past the end of a fixed-size buffer, because screenhandlemulticellcommand in kitty/screen.c appends each codepoint of a grapheme cluster...

CVE-2026-80430 Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

CVE-2026-80430 Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

CVE-2026-80430 Improper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

CVE-2026-80430

The kitty terminal emulator (versions 0.47.0 before 0.49.0 ) is vulnerable to an improper link resolution flaw in its drag and drop protocol. The root cause lies in subdir_data_for_drag() within kitty/dnd.c, which constructs path strings instead of walking the tree component by component. This al...

CVE-2026-76921

A flaw was found in Wireshark. A use-after-free vulnerability exists in the CMS Cryptographic Message Syntax protocol dissector. An attacker could exploit this by crafting a malicious network packet, leading to a crash and a denial of service DoS for the application. Mitigation To mitigate this d...

DEBIAN-CVE-2026-97596

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

CVE-2026-97596 ipvs: reject invalid states in connection template sync records

In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync receivers validate protocol states before creating or updating a connection. For connection templates, however, they only log states outside the template...

fr.enedis.chutney:action-impl (5.0.0), fr.enedis.chutney:chutney-kotlin-dsl (5.0.0) +6 more potentially affected by CVE-2026-92550 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92550 Source advisory: MEND:CVE-2026-92550...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2026-92560 via org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92560 Source advisory: MEND:CVE-2026-92560...