79789 matches found
GHSA-CG2G-XH64-V4Q7 DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
Summary When DOMPurify is configured with SAFEFORTEMPLATES: true together with a DOM-returning mode RETURNDOM: true, RETURNDOMFRAGMENT: true, or INPLACE: true, template expressions such as ..., $..., and survive sanitization inside the text content of an attached shadow root. The post-walk safety...
GHSA-H694-7CP9-M8P3 next.js cache leak across root param values in nested 'use cache' functions
Impact With Cache Components enabled cacheComponents: true, a 'use cache' function that calls another 'use cache' function that reads a root param can be keyed incorrectly when the inner call is served from an existing entry: the enclosing function's cache key then omits that root param. The...
next.js cache leak across root param values in nested 'use cache' functions
Impact With Cache Components enabled cacheComponents: true, a 'use cache' function that calls another 'use cache' function that reads a root param can be keyed incorrectly when the inner call is served from an existing entry: the enclosing function's cache key then omits that root param. The...
EUVD-2026-90872
next.js cache leak across root param values in nested 'use cache' functions...
OESA-2026-4520 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4518 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4519 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4517 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
ROOT-APP-PYPI-CVE-2022-40897 CVE-2022-40897 in setuptools - Patched by Root
Root has patched CVE-2022-40897 in the setuptools package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-47273 CVE-2025-47273 in setuptools - Patched by Root
Root has patched CVE-2025-47273 in the setuptools package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-6345 CVE-2024-6345 in setuptools - Patched by Root
Root has patched CVE-2024-6345 in the setuptools package for Root:PyPI. Multiple fixed versions available...
CVE-2026-92709 Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE
Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...
CVE-2026-92709 Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE
Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...
CVE-2026-92709
The rsyslog log processing system (versions 1.15.0 to 8.2610.0 ) is vulnerable to a path traversal flaw within the omfile dynaFile facility. The issue arises when a dynaFile template uses untrusted input as a path component without explicit secure-path handling, allowing an attacker to escape the...
CVE-2026-92709 Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE
Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...
ROOT-OS-DEBIAN-13-CVE-2026-44171 CVE-2026-44171 in mariadb - Patched by Root
Root has patched CVE-2026-44171 in the mariadb package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-44168 CVE-2026-44168 in mariadb - Patched by Root
Root has patched CVE-2026-44168 in the mariadb package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-44173 CVE-2026-44173 in mariadb - Patched by Root
Root has patched CVE-2026-44173 in the mariadb package for Root:Debian:13. Multiple fixed versions available...