CLEANSTART-2026-OB67421 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...

Linux Distros Unpatched Vulnerability : CVE-2026-113795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that...

PT-2026-122206

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.2 Description An incomplete remediation for repeated malformed cross-reference entries allows a crafted PDF to trigger a complete PDF stream reload during each recovery attempt, even when a recovery cache is presen...

PYSEC-2026-4323 Out-of-bounds write in the brotlicffi decoder ("Node2Shell") also affects the PyPI Brotli package

CVE-2026-111497 "Node2Shell" is an out-of-bounds write CWE-787 in Google's Brotli decoder c/dec/decode.c. DecodeBlockTypeAndLength returns an ambiguous value for an invalid block switch, and the fast decode path discards it CWE-252, unchecked return value, so a crafted Brotli stream makes the...

Detections-CVE-2026-23918

MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-23918 "Apache HTTP/2 Double-Free" — Detection & Response Package Published: 2026-05-04...

CVE-2026-113872

A flaw was found in multer. A remote attacker could cause a Denial of Service DoS by sending and abruptly aborting a file upload request when an asynchronous file filter is configured. When the aborted request's pending filter callback finishes, it triggers an unhandled stream error, leading to a...

CVE-2026-115377 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transferred volumes. Attackers can craft rsync or btrfs receive streams with a symlink such as rootfs...

CVE-2026-115377

The Incus container management system is vulnerable to an arbitrary file write vulnerability in versions prior to 6.0.7 , 6.1.0 before 7.0.2 , and 7.1.0 before 7.5.0 . The root cause is improper link resolution (CWE-59) during volume migrations, where a malicious migration source can plant symlin...

CVE-2026-115377 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transferred volumes. Attackers can craft rsync or btrfs receive streams with a symlink such as rootfs...

EUVD-2026-107331

pypdf: Possible large memory usage when parsing content streams...

EUVD-2026-107412

stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving Odepth^2 CPU denial of service...

stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service

Summary FlexAssembler, the custom-container assembler shipped in the stream-json package src/core/utils/flex-assembler.js, re-exported at stream-json/utils/flex-assembler.js and stream-json/web/utils/flex-assembler.js, compiles a string or RegExp path filter into a matcher that runs...

GHSA-JJ87-HC4R-JWFW stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service

Summary FlexAssembler, the custom-container assembler shipped in the stream-json package src/core/utils/flex-assembler.js, re-exported at stream-json/utils/flex-assembler.js and stream-json/web/utils/flex-assembler.js, compiles a string or RegExp path filter into a matcher that runs...

npm: stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service

npm: stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving Odepth^2 CPU denial of service vulnerability discovered by ? in WordPress npm stream-json versions = 2.0.0, = 3.6.0...

Important: Red Hat Security Advisory: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CLEANSTART-2026-DX09334 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order

CVE-2026-42772 affects multiple packages. Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. See references for individual vulnerability details...

CLEANSTART-2026-UE71064 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...

PT-2026-121403

Name of the Vulnerable Software and Affected Versions body-parser versions prior to 1.20.9 body-parser versions 2.0.0 through 2.3.x Description An issue exists where a single request can crash an application using default options. When a request uses a Content-Encoding like gzip, the software pip...

CVE-2026-109618

🟣 PHP2Shell: Critical RCE Analysis & Mitigation Guide -8A2BE2?style=for-the-badge&logo=shield -4B0082?style=for-the-badge&logo=shield Technical advisory, threat intelligence, and detection signatures for thePHP2Shell Remote Code Execution vulnerabilities. 📌 Overview PHP2Shell refers to a pair of...

CVE-2026-112054

A flaw was found in schroedinger. By tricking a user or application into processing a specially crafted Dirac video stream, an attacker can trigger a division-by-zero condition during the parsing of low-delay transform parameters. This failure causes the application to crash unexpectedly, resulti...