64 matches found
CVE-2026-97614
A flaw was found in the Linux kernel's Distributed Switch Architecture DSA Broadcom tagger. The legacy Frame Check Sequence FCS tag handler failed to declare the required buffer tailroom, allowing non-linear network packet buffers to reach the checksum calculation routine. A local user could...
brevettiai (>=0.5.4, <=0.8.5), darkseid (>=1.2.0, <=2.0.1) +2 more potentially affected by CVE-2026-55195 via py7zr (0.18.12)
py7zr PYPI version 0.18.12 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - brevettiai =0.5.4, =1.2.0, =1.1.6, =1.1.1, =1.9.1 Source cves: CVE-2026-55195 Source advisory: OSV:PYSEC-2026-2972...
brevettiai (>=0.5.4, <=0.8.5), darkseid (>=1.2.0, <=2.0.1) +2 more potentially affected by CVE-2026-55206 via py7zr (0.18.12)
py7zr PYPI version 0.18.12 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - brevettiai =0.5.4, =1.2.0, =1.1.6, =1.1.1, =1.9.1 Source cves: CVE-2026-55206 Source advisory: OSV:PYSEC-2026-2973...
CVE-2026-12252
CVE-2026-12252 affects nltk/nltk versions 3.9.3 and earlier, leaving five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, StanfordNeuralDependencyParser) vulnerable to untrusted JAR code execution. These classes accept user-controlled JA...
brevettiai (>=0.5.4, <=0.8.5), darkseid (>=1.2.0, <=2.0.1) +2 more potentially affected by CVE-2026-55206 via py7zr (0.18.12)
py7zr PYPI version 0.18.12 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - brevettiai =0.5.4, =1.2.0, =1.1.6, =1.1.1, =1.9.1 Source cves: CVE-2026-55206 Source advisory: OSV:GHSA-H4GH-22QQ-72R7...
brevettiai (>=0.5.4, <=0.8.5), darkseid (>=1.2.0, <=2.0.1) +2 more potentially affected by CVE-2026-55195 via py7zr (0.18.12)
py7zr PYPI version 0.18.12 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - brevettiai =0.5.4, =1.2.0, =1.1.6, =1.1.1, =1.9.1 Source cves: CVE-2026-55195 Source advisory: OSV:GHSA-GJRG-MPP7-G774...
brevettiai (>=0.5.4, <=0.8.5), darkseid (>=1.2.0, <=2.0.1) +2 more potentially affected by CVE-2026-23879 via py7zr (0.18.12)
py7zr PYPI version 0.18.12 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - brevettiai =0.5.4, =1.2.0, =1.1.6, =1.1.1, =1.9.1 Source cves: CVE-2026-23879 Source advisory: OSV:GHSA-Q6RC-2CGV-63H7...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: net: dsa: don’t leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba, we had a issue where a call to tagops-disconnectdst was issued from dsatreefree, which was called during the tree teardown...
Uncontrolled Search Path in HunposTagger Allows Untrusted Local Binary Selection in nltk/nltk
Description HunposTagger resolves hunpos-tag using a search list that includes the current working directory ".". This allows attacker-controlled binaries in CWD to be selected. Affected code path: nltk/tag/hunpos.py: hunpospaths = ".", ... self.hunposbin = findbinary"hunpos-tag", ...,...
EUVD-2025-12955
Malicious code in bioql PyPI...
EUVD-2025-10593
Malicious code in bioql PyPI...
Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking
Logit-based LLM watermarking traces and verifies AI-generated content by maintaining green and red token lists and increasing the likelihood of green tokens during generation. However, it fails in low-entropy scenarios, where predictable outputs make green token selection difficult without...
SUSE CVE-2022-49808
In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba "net: dsa: introduce tagger-owned storage for private and shared data", we had a call to tagops-disconnectdst issued from...
DEBIAN-CVE-2022-49808
In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba "net: dsa: introduce tagger-owned storage for private and shared data", we had a call to tagops-disconnectdst issued from...
UBUNTU-CVE-2022-49808
In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba "net: dsa: introduce tagger-owned storage for private and shared data", we had a call to tagops-disconnectdst issued from...
CVE-2022-49808 net: dsa: don't leak tagger-owned storage on switch driver unbind
In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba "net: dsa: introduce tagger-owned storage for private and shared data", we had a call to tagops-disconnectdst issued from...
CVE-2022-49808
CVE-2022-49808 concerns the Linux kernel net: dsa teardown path where tagger-owned storage could leak on unbind. The provided description explains the root cause: in the dsa switch teardown path, tag_ops->disconnect was not properly dismantled during normal driver teardown, risking use-after-f...
CVE-2022-49808 net: dsa: don't leak tagger-owned storage on switch driver unbind
In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba "net: dsa: introduce tagger-owned storage for private and shared data", we had a call to tagops-disconnectdst issued from...
CVE-2022-49808: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: dsa: don't leak tagger-owned storage on switch driver unbind In the initial commit dc452a471dba "net: dsa: introduce tagger-owned storage for private and shared data", we had a call to tagops-disconnectdst issued from...
CVE-2025-32563
Cross-Site Request Forgery CSRF vulnerability in dangrossman WP Calais Auto Tagger calais-auto-tagger allows Cross Site Request Forgery.This issue affects WP Calais Auto Tagger: from n/a through = 2.0...