CVE-2023-23924

CVE-2023-23924 Dompdf vulnerable to URI validation failure on SVG parsing · CVE-2023-23924 · GitHub Advisory Database https://github.com/advisories/GHSA-3cw5-7cxw-v5qg Run Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php Check Check the "whoami" command ...

CVE-2026-72755 Routinator stores TA certificate in cache without validation

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

EUVD-2026-109934

Mattermost versions 11.7.x = 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID:...

ALPINE-CVE-2026-106070

A flaw in the Node.js zlib.ZipFile API can cause it to return bytes that do not belong to the requested entry after the local and central header validation fails. When zipEntry.modified is read on an archive whose local header does not match its central directory, either directly or while...

EulerOS 2.0 SP13 : python-jwt (EulerOS-SA-2026-4185)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

EulerOS 2.0 SP13 : python-jwt (EulerOS-SA-2026-4094)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

EulerOS 2.0 SP15 : python-jwt (EulerOS-SA-2026-3942)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

EUVD-2026-93556

ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions...

CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

PT-2026-106831

Name of the Vulnerable Software and Affected Versions ImageSharp versions 1.0.0-beta0001 through 4.1.1 Description ICC CLUT parsing calculates allocation sizes based on attacker-declared channel and grid dimensions before verifying that the profile contains the declared values. The...

CVE-2026-106114: Memory Allocation with Excessive Size Value

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

GHSA-5J98-2G5X-46V6 hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

When calling Resolver::lookup or Resolver::lookupip on a resolver with DNSSEC validation enabled, both methods return Ok... if DNSSEC validation fails. It is possible but very inconvenient to check the validation status of individual records. These methods should instead return an error when DNSS...

CVE-2026-79820

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...

CVE-2026-79820

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...

CVE-2026-79820

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...

EUVD-2026-92433

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...

CVE-2026-79820

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware . This flaw allows for a potential CRITICAL impact on confidentiality, integrity, and availability. While the CVSS score indicates a high attack complexity and a changed scope, specific technical d...

CVE-2026-79820: Improper Authentication

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...

PT-2026-106002

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out iLO 7 version 1.25.00 Description A remote user validation failure exists in the firmware. This issue could allow an unauthorized user to gain access to the iLO, which provides capabilities to power a server and open ...