imx_pd_connector_get_modes() DRI DoS

The vulnerability of the imxpdconnectorgetmodes function in the drivers/gpu/drm/imx/parallel-display.c driver, which supports the Direct Rendering Infrastructure DRI of the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...

smu_v12_0_fini_smc_tables Heap Buffer Overflow DoS

The vulnerability of the smuv120finismctables function in the drivers/gpu/drm/amd/pm/swsmu/smu12/smuv120.c driver module is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Blink Rendering Compromise

The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

drivers/gpu/drm/amd/amdkfd/kfd_svm.c Heap Buffer Overflow DoS

The vulnerability of the svmrangevramnodenew function in the drivers/gpu/drm/amd/amdkfd/kfdsvm.c driver for supporting the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacke...

Craft CMS 5.9.x < 5.9.11 Stored XSS (GHSA-3x4w-mxpf-fhqq)

The version of Craft CMS installed on the remote host is 5.9.x prior to 5.9.11. It is, therefore, affected by a cross-site scripting vulnerability: - The revision/draft context menu in the element editor renders the creator's fullName as raw HTML due to the use of Template::raw combined with...

GHSA-M2P3-HWV5-XPQW Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString

Summary The LimitToString safety limit default 1MB since commit b5ac4bf can be bypassed to allocate approximately 1GB of memory by exploiting the per-call reset of currentToStringLength in ObjectToString. Each template expression rendered through TemplateContext.WriteSourceSpan, object triggers a...

CVE-2026-33418 @dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment Injection

DiceBear is an avatar library for designers and developers. Prior to version 9.4.2, the ensureSize function in @dicebear/converter used a regex-based approach to rewrite SVG width/height attributes, capping them at 2048px to prevent denial of service. This size capping could be bypassed by crafti...

CVE-2026-33418 @dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment Injection

DiceBear is an avatar library for designers and developers. Prior to version 9.4.2, the ensureSize function in @dicebear/converter used a regex-based approach to rewrite SVG width/height attributes, capping them at 2048px to prevent denial of service. This size capping could be bypassed by crafti...

Command Injection

Overview indico is a conference lifecycle management and meeting/lecture scheduling tool. Affected versions of this package are vulnerable to Command Injection due to insufficient sanitization of LaTeX syntax. An attacker can execute arbitrary code or access local files by submitting...

DRI Support Driver Kernel Heap Buffer Overflow DoS

The vulnerability of the handlescheddone function in the drivers/gpu/drm/xe/xegucsubmit.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

PT-2026-73157

Name of the Vulnerable Software and Affected Versions Scriban versions prior to 7.0.0 Description The software fails to apply the LoopLimit constraint to expensive iterations performed within built-in operators and functions, applying it only to script loop statements. This allows a single...

PT-2026-73154

Name of the Vulnerable Software and Affected Versions Scriban versions prior to 7.0.0 Description A denial-of-service issue exists where the LimitToString safety limit, which defaults to 1MB, can be bypassed. This occurs because the ObjectToString function resets the per-call length counter...

CVE-2026-33046 Indico discloses local files resulting in Remote Code Execution through LaTeX injection

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is possible to use specially-crafted LaT...

CVE-2026-33046

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is possible to use specially-crafted LaT...

GHSA-RM2Q-F7JV-3CFP Indico discloses local files resulting in Remote Code Execution through LaTeX injection

!NOTE If server-side LaTeX rendering is not in use ie XELATEXPATH was not set in indico.conf, this vulnerability does not apply. Impact Due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is possible to use specially-crafted LaTeX...

Indico discloses local files resulting in Remote Code Execution through LaTeX injection

!NOTE If server-side LaTeX rendering is not in use ie XELATEXPATH was not set in indico.conf, this vulnerability does not apply. Impact Due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is possible to use specially-crafted LaTeX...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the rendering process of saved names in the Cabinet Plugin list view. An authenticated user can execute arbitrary scripts in a victim's browser by injecting malicious input, potentially leading to unauthorize...

GO-2026-4765 mo has a XSS via inline SVG script tags in Markdown rendering in github.com/k1LoW/mo

mo has a XSS via inline SVG script tags in Markdown rendering in github.com/k1LoW/mo...

GO-2026-4743 SiYuan has Stored XSS to RCE via Unsanitized Bazaar README Rendering in github.com/siyuan-note/siyuan/kernel

SiYuan has Stored XSS to RCE via Unsanitized Bazaar README Rendering in github.com/siyuan-note/siyuan/kernel...

ROS-20260323-73-0013

A vulnerability in the drm/amdkfd component of the Linux kernel is related to mutual blocking of execution threads. Exploitation of the vulnerability allows an attacker to cause a denial of service...