Controlling when CSS custom property values are computed

When and how CSS custom property values are calculated might not be what you expect, and it has a big impact on your styles. The default Take this HTML: … And this CSS: .second-item --index: sibling-index; & :first-child scale: var--index; If you're unfamiliar with sibling-index, here's a quick...

CVE-2026-55865 Python Liquid: Infinite loop when parsing malformed `{% case %}` tags

Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.1, given a malformed % case % tag without an associated % when % or % else % block and no terminating % endcase % tag, Python Liquid hangs in an infinite loop at parse time because liquid.TokenStream.eof did not give...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.graph.GraphTokenStreamFiniteStrings.articulationPointsRec

Detailed Report: https://oss-fuzz.com/testcase?key=4713344478347264 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Denial Of Service (DoS)

glib2 is vulnerable to denial of service. It is possible due to a heap-buffer-overflow in tokenstreamprepare on glib/gvariant-parser.c...

PT-2021-27548

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions token stream prepare, token stream peek string, and token stream...

PT-2021-27546

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the token stream prepare function, and is related to...