MariaDB Server has a vulnerability related to input validation errors.

MariaDB Server versions prior to 10.6.28 10.6.x series, 10.11.19 10.11.x series, 11.4.13 11.4.x series, 11.8.9 11.8.x series, 12.3.3 12.3.x series, and 13.0.2 13.0.x series have a input validation vulnerability. This vulnerability arises from the ability of the mysql50 prefix to bypass the...

sgl-project SGLang Input Validation Vulnerability

The sgl-project SGLang version 0.5.21 and earlier have a vulnerability related to input validation errors. This vulnerability arises from using the mmhashes value provided by the trusted caller as a multi-modal prefix for caching keys. A remote attacker can send different images with known or...

Nezhahq Nezha: Input validation error vulnerability

Versions of Nezhahq Nezha from 2.1.0 to 2.3.15 had a vulnerability related to input validation errors. This vulnerability occurred because the mintTransferTool never validated the construction of Host headers for the fs.downloadurl and fs.uploadurl URLs. This could allow attackers to redirect fil...

WHEELS.DEV: Wheel

WHEELS.DEV: In versions 4.0.0 to 4.1.2, there is a vulnerability related to input validation errors. This vulnerability stems from the use of case-insensitive comparisons on a case-sensitive file system. As a result, the checks for standard paths of zip entries, package maps, development...

FreeRDP has a vulnerability related to input validation errors

FreeRDP versions 3.30.0 to 3.32.0 previously had a vulnerability related to input validation errors. This vulnerability stemmed from a resource exhaustion issue in the rdpecam client. A malicious RDP server could request unannounced camera media types. Attackers could send requests with extremely...

WHEELS.DEV: Wheel

WHEELS.DEV: Versions 1.1 to 4.1.2 contain a vulnerability related to input validation errors. This vulnerability arises from the use of nestedProperties, which parses records based on the primary key submitted by the user. However, it does not verify whether the parsed record is actually a child ...

Tandoor Recipes: Input validation vulnerability

Versions of Tandoor Recipes prior to 2.6.10 contained a vulnerability related to input validation errors. This vulnerability occurred due to unvalidated sortorder and orderfield strings being passed into Django ORM’s orderby method. Users with authenticated access could exploit this vulnerability...

Backdrop CMS cross-site scripting vulnerabilities

Backdrop CMS versions prior to 1.35.2, including 1.35.x and 1.34.x versions prior to 1.34.6, have a cross-site scripting vulnerability. This vulnerability stems from insufficient validation of uploaded SVG images, as these images are not ensured to contain no dangerous SVG tags. When attackers...

Microsoft Authentication Library for Node.js Input Validation Vulnerability

The Microsoft Authentication Library for Node.js has a vulnerability related to input validation errors. This vulnerability stems from source validation errors, which may allow unauthorized attackers to leak information through the network...

Joe Smart-SSO: Input validation vulnerability

Joe Smart-SSO versions 2.1.1 and earlier have a vulnerability in input validation. This vulnerability stems from the /login handler not verifying the redirectUri parameter properly. An open redirection exists, which may allow unauthenticated attackers to steal OAuth2 authorization codes and obtai...

Anthropic Claude Agent SDK for Python: Input validation vulnerability

The Anthropic Claude Agent SDK for Python versions prior to 0.2.121 contain security vulnerabilities. These vulnerabilities stem from the resumption option being passed as an independent token to the Claude CLI without verification. Values starting with a dash are interpreted as independent CLI...

Guangzhou Juan IoT EseeCloud App has a vulnerability in input validation.

The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a vulnerability in input validation. This vulnerability arises from improper verification of device unbinding and re-binding operations by the server. Attackers ca...

Mattermost input validation vulnerability

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have a input validation vulnerability. This vulnerability stems from the failure to verify the integrity of the SAML...

Devolutions Server has a vulnerability related to input validation errors.

Devolutions Server 2026.3.8.0 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper control over the JIT privilege settings in the PAM checkout process. It may allow authenticated users with PAM checkout access to delete any Active...

CVE-2026-100352 kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and infinity numeric values to santhosh-tekuri/jsonschema v6.0.2 without applying kin-openapi's existing finite-number guards. A remote unauthenticated client can send an...

CVE-2026-100352 kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and infinity numeric values to santhosh-tekuri/jsonschema v6.0.2 without applying kin-openapi's existing finite-number guards. A remote unauthenticated client can send an...

Astra Linux – vulnerability in rabbitmq-server

RabbitMQ versions prior to 3.8.16 are vulnerable to a denial-of-service issue due to improper input validation in the AMQP 1.0 client connection endpoint. A malicious user can exploit this vulnerability by sending malicious AMQP messages to a target RabbitMQ instance that has the AMQP 1.0 plugin...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: f2fs: A fix was made to perform a sanity check on the destination blkaddr during recovery. As Wenqing Liu reported in Bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 loop5: A change in capacity was detected, from 0...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: ath11k: Fixed corruption of SKBs in the REO destination ring. While running traffic for a long time, a random RX descriptor filled with the value “0” from the REO destination ring is received. This invalid descriptor...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: It is necessary to check that sock is valid before assigning it to iscsisetparam. The validity of sock should be checked before assigning it to prevent incorrect values. The change introduced in commit 57569c37f0a...