PT-2026-83626

Name of the Vulnerable Software and Affected Versions ash graphql versions 0.27.0 through 1.10.9 Description Improper input validation allows an unauthenticated client to crash a relay nodeid: ... query. The AshGraphql.Graphql.Resolver.resolve node/2 function uses decode relay id/1 to decode a...

PT-2026-83568

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit ha...

PT-2026-83639

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

PT-2026-83547

Name of the Vulnerable Software and Affected Versions ash sql versions 0.1.0 through 0.7.0 Description An incorrect comparison issue exists where a user can pad a string field with tab, newline, carriage-return, or form-feed characters to bypass trimmed uniqueness or equality checks. This occurs...

PT-2026-83542

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust searchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and...

PT-2026-83574

Name of the Vulnerable Software and Affected Versions WWBN AVideo affected versions not specified Description An issue exists in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. This allows attackers to bypass server-side request forgery SSRF...

PT-2026-83531

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/emp searchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

PT-2026-83576

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function kernel/model/template.go, reachable via the POST /api/template/render endpoint kernel/api/template.go. The endpoint restricts the supplied path only to the workspace directory...

PT-2026-83632

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A remote memory corruption issue exists in the AMF component within the amf namf comm decode ue mm context list function located in the src/amf/namf-handler.c file. The flaw is triggered by the...

PT-2026-83587

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The...

PT-2026-83544

Name of the Vulnerable Software and Affected Versions ash sql versions 0.4.1 through 0.7.0 Description An incorrect authorization issue allows a caller to bypass scoping or authorization filters expressed as exists/2 over a relationship that declares both a limit or from many? and a filter or sor...

openSUSE 16 Security Update : vim (openSUSE-SU-2026:21671-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21671-1 advisory. Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service...

PT-2026-83551

Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A buffer overflow exists in the Boa Web Server component. The issue occurs within the formIPv6Routing function located in the /boaform/admin/formIPv6Routing endpoint. A remote attacker can...

PT-2026-83636

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A flaw in the N1-N2 Message Handler component allows a remote attacker to cause a denial of service. This occurs through the manipulation of the ngapIeType variable within the...

Security update for git-lfs (important)

openSUSE Security Update: Security update for git-lfs Announcement ID: openSUSE-SU-2026:0305-1 Rating: important References: 1239322 1252259 Cross-References: CVE-2025-22869 CVE-2025-26625 CVSS scores: CVE-2025-22869 SUSE: 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

PT-2026-83631

Name of the Vulnerable Software and Affected Versions ash graphql versions 0.16.23 through 1.10.9 Description An unauthenticated client can bypass the configured GraphQL query-complexity limit to force an unbounded database read. This occurs because the query complexity/3 function in...

CVE-2026-82417

CVE-2026-82417 is a synchronous crash in the qs query-string library (Node.js). utils.isBuffer in lib/utils.js duck-types Buffer objects by invoking obj.constructor.isBuffer(obj) after only a truthy check, so any object carrying its own constructor property with a truthy, non-callable isBuffer me...

CVE-2026-82417

Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...

CVE-2026-82417 qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property

Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...

CVE-2026-82417 qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property

Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...