CVE-2026-67339 vulnerabilities

Vulnerabilities for packages: privatebin, drupal, nextcloud-server...

CVE-2026-67355 vulnerabilities

Vulnerabilities for packages: privatebin, drupal, nextcloud-server...

GHSA-MJRX-74JH-7XGW vulnerabilities

Vulnerabilities for packages: privatebin, drupal, nextcloud-server...

GHSA-MQQ9-GXG5-M58G vulnerabilities

Vulnerabilities for packages: privatebin, drupal, nextcloud-server...

CVE-2026-67353 vulnerabilities

Vulnerabilities for packages: privatebin, drupal, nextcloud-server...

CVE-2026-67354 vulnerabilities

Vulnerabilities for packages: privatebin, drupal, nextcloud-server...

CVE-2026-70367

A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...

CVE-2026-67339 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-32RQ-JHR7-M3HH vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-MQQ9-GXG5-M58G vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-67354 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-67355 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-3FVR-2JW6-CRQ4 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-67353 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-MJRX-74JH-7XGW vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-67199 Perspective 5.0.0 DoS via Loop Expression Evaluation

Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewReq message. Attackers can embed an arbitrarily large...

CVE-2026-67199

CVE-2026-67199 affects Perspective 5.0.0. The vulnerability arises from evaluating an expression in a TableMakeViewReq message that can contain unbounded for/while loop constructs. An attacker can embed an arbitrarily large iteration count in a single expression column evaluated per table row, ca...

CVE-2026-67198 Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with ...

CVE-2026-67198

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Specifically, sending well-formed requests such as ViewToArrowReq wi...

EUVD-2026-52692

Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval with only...