CVE-2026-81176

Svelte devalue is a JavaScript library used for serializing values beyond what JSON.stringify supports. Prior to 5.9.2 , the devalue.parse function in src/parse.js failed to reject out-of-bounds indices greater than or equal to values.length. A specially crafted untrusted payload can cause the pa...

DEBIAN-CVE-2026-75596

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre-handshake ClientHello aggregation path in handler/src/main/java/io/netty/handler/ssl/SslClientHelloHandler.java at...

EUVD-2026-42329

Mistune plugins/formatting: quadratic-time parsing on long runs of x, ==x==, and ^^x^^ markers strikethrough / mark / insert...