llvm:llvm-special-case-list-fuzzer: Crash in p_ere

Detailed Report: https://oss-fuzz.com/testcase?key=6388532688781312 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b6587ce1ff0 Crash State: pere pere pere Sanitizer: addre...

libaom:av1_enc_fuzzer: Crash in aom_compute_flow_at_point_c

Detailed Report: https://oss-fuzz.com/testcase?key=5864737481752576 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1encfuzzer Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d321e1b7190 Crash State: aomcomputeflowatpointc...

WordPress Podlove Podcast Publisher plugin <= 4.5.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by an unknown individual in WordPress Plugin Podlove Podcast Publisher versions = 4.5.1...

CVE-2026-61907

A flaw was found in cyrus-imapd. An authenticated user with insert permissions on another user's snoozed mailbox could bypass access controls. This allows the user to insert mail into the target user's inbox or other known mailboxes, even without explicit insert permissions for those mailboxes...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-75668

creationtimestamp| type| source ---|---|--- 2026-09-09 02:14:29+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv2honpo5k26...

express-helmet (1.0.1), gloggo (>=1.1.2, <=1.1.4) +2 more potentially affected by unknown CVE via file-type-detector (1.1.1)

file-type-detector NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on file-type-detector and may be impacted: - express-helmet 1.0.1 - gloggo =1.1.2, =2.3.2, =2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory:...

gloglet (2.3.3) potentially affected by unknown CVE via gloggo (1.1.3)

gloggo NPM version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gloggo and may be impacted: - gloglet 2.3.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-16054...

CVE-2026-69612

creationtimestamp| type| source ---|---|--- 2026-09-08 22:06:23+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:05:39+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:48:20+00:00|...

CVE-2026-69539

creationtimestamp| type| source ---|---|--- 2026-09-08 22:03:52+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:03:44+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:15:41+00:00|...

@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.2) +191 more potentially affected by CVE-2026-92596 via nodemailer (>=9.0.0, <=9.0.6)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2026-92596 Source advisory: SNYK:JS-NODEMAILER-19651822...

@apisurf/canonui (>=0.1.1, <=0.2.1), @apisurf/deckui (>=0.1.1, <=0.1.2) +16 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =1.0.1, =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-26W7-CXV4-GFX2...

@apisurf/canonui (>=0.1.1, <=0.2.1), @apisurf/deckui (>=0.1.1, <=0.1.2) +16 more potentially affected by unknown CVE via astro (>=7.0.2, <=7.2.6)

astro NPM version =7.0.2, =0.1.1, =0.1.1, =3.1.0, =0.4.9, =0.2.0, =0.1.0, =0.1.0, =1.0.1, =1.2.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-ASTRO-19652369...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0x1 (>=0.0.0, <=0.0.379) +22148 more potentially affected by unknown CVE via sharp (>=0.4.2, <=0.35.3)

sharp NPM version =0.4.2, =0.1.0, =0.0.0, =0.0.2, =4.2.0-next.2, =0.0.1, =1.0.0-alpha.1, =1.0.0, =1.0.9, =1.0.0, =0.0.1, =1.225.0, =0.4.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: SNYK:JS-SHARP-19653587...

@a3s-lab/office (>=0.1.0, <=0.312.0), @acms-subir/core (>=0.3.4, <=0.3.21) +307 more potentially affected by unknown CVE via @tiptap/core (>=3.7.0, <=3.30.4)

@tiptap/core NPM version =3.7.0, =0.1.0, =0.3.4, =0.2.0, =0.2.0-nightly-20260914153919, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819155526, =0.1.26, =0.0.0-beta-20260819155526, =0.0.0-beta-20260819143124, =1.0.0, =0.2.0, =2.2.2, =1.3.7-beta.22, =3.0.0-beta.4 and more Source cves: unknown CVE...

@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.2) +191 more potentially affected by CVE-2026-92595 via nodemailer (>=9.0.0, <=9.1.0)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2026-92595 Source advisory: SNYK:JS-NODEMAILER-19651820...

@3ngram/server (>=0.7.0, <=1.6.1), @adatechnology/conversation-module (>=0.2.0, <=0.4.2) +191 more potentially affected by CVE-2026-92595 via nodemailer (>=9.0.0, <=9.1.0)

nodemailer NPM version =9.0.0, =0.7.0, =0.2.0, =2026.7.1, =5.52.1-fa.2, =5.52.1-fa.2, =0.2.0, =0.1.3, =6.1.211-alpha, =6.1.211-alpha, =6.1.211-alpha, =0.6.0, =0.8.0 and more Source cves: CVE-2026-92595 Source advisory: OSV:GHSA-8M3C-C648-2XJJ...

CVE-2026-81383

creationtimestamp| type| source ---|---|--- 2026-09-08 20:18:34+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0351 2026-09-08 22:04:05+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:39+00:00| seen|...

CVE-2026-81356

creationtimestamp| type| source ---|---|--- 2026-09-08 20:18:23+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0351 2026-09-08 22:04:07+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:39+00:00| seen|...

CVE-2026-70296

creationtimestamp| type| source ---|---|--- 2026-09-08 20:12:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzth2jf7k22 2026-09-08 20:19:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:01:41+00:00| seen|...