44264 matches found
Infinite loop
Overview Affected versions of this package are vulnerable to Infinite loop in the FileTypeParser class. This is triggered when the ASF WMV/WMA parser receives input including an ASF sub-header with a size value of 0. An attacker can interrupt service with a 55-byte payload. Remediation A fix was...
GHSA-5V7R-6R5C-R473 file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header
Impact A denial of service vulnerability exists in the ASF WMV/WMA file type detection parser. When parsing a crafted input where an ASF sub-header has a size field of zero, the parser enters an infinite loop. The payload value becomes negative -24, causing tokenizer.ignorepayload to move the rea...
CVE-2025-47911 affecting package docker-compose for versions less than 2.27.0-8
CVE-2025-47911 affecting package docker-compose for versions less than 2.27.0-8. A patched version of the package is available...
CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5
CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...
CVE-2026-23187 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23187 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2025-58190 affecting package gh for versions less than 2.62.0-13
CVE-2025-58190 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...
CVE-2026-23992 affecting package gh for versions less than 2.62.0-13
CVE-2026-23992 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...
CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6
CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...
Heap-based Buffer Overflow
Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
CVE-2026-31808 file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header
file-type detects the file type of a file, stream, or data. Prior to 21.3.1, a denial of service vulnerability exists in the ASF WMV/WMA file type detection parser. When parsing a crafted input where an ASF sub-header has a size field of zero, the parser enters an infinite loop. The payload value...
GHSA-PH5J-38MG-J6HP vulnerabilities
Vulnerabilities for packages: grafana-operator, metacontroller, pluto, victoriametrics-cluster, grafana-rollout-operator, dkron, podinfo, flux-image-reflector-controller, stakater-reloader, terragrunt, flux-image-automation-controller, flux-helm-controller, victoriametrics,...
CVE-2025-15599 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse...
Malicious code in test-logsmodule-v-zisko (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f59f2c34febf5b71ba7f6912540619742de8815167ecc99397fe9b5b9eced9 The package test-logsmodule-v-zisko was found to contain malicious code. Source: ghsa-malware...
MAL-2026-1323 Malicious code in bluelite-bot-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02181290fe37f11e082818a15c1f6baa4d8479279412a74ec4b440ec14dafc7 The package bluelite-bot-manager was found to contain malicious code. Source: ghsa-malware...
2026-03 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5078885)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2026-03 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5078938)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2026-03 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5078938)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
KB5078738: Cumulative security update for Internet Explorer: March 10, 2026
None None...
