29106 matches found
EUVD-2026-42344
pypdf: Possible long runtimes for repeated malformed cross-reference entries...
pypdf: Possible long runtimes for repeated malformed cross-reference entries
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...
GHSA-55H5-XMCQ-C37V pypdf: Possible long runtimes for repeated malformed cross-reference entries
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...
WordPress Kirki – Freeform Page Builder, Website Builder & Customizer plugin <= 6.0.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability
Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure vulnerability discovered by Abu Hurayra HurayraIIT in WordPress Plugin Kirki versions = 6.0.14...
DEBIAN-CVE-2026-65904
DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...
CVE-2026-65902
DOMPurify before 3.4.7 affected versions = 3.4.5 passes direct references to the module-level DEFAULTALLOWEDTAGS and DEFAULTALLOWEDATTR sets to the uponSanitizeElement and uponSanitizeAttribute hooks via data.allowedTags / data.allowedAttributes when sanitize is called without an explicit...
MINI-RVQQ-56R4-W3JX
Bulletin has no description...
MINI-MMQ6-34V7-CJ7X
Bulletin has no description...
MINI-W38V-85HC-5F9H
Bulletin has no description...
MINI-MGWC-PMF5-PCRQ
Bulletin has no description...
MINI-FFGW-GVQ6-WR4G
Bulletin has no description...
MINI-JHHG-86VW-6MMG
Bulletin has no description...
MINI-P9HJ-WFM6-54R8
Bulletin has no description...
MINI-84VJ-4RFR-4RR9
Bulletin has no description...
MINI-M5G8-G2XF-FJWJ
Bulletin has no description...
MINI-PFX4-3JQV-GM5F
Bulletin has no description...
MINI-C26X-JXWH-6MCF
Bulletin has no description...
MINI-2WQ4-JWHR-9778
Bulletin has no description...