2784 matches found
CVE-2026-81642
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...
CVE-2026-81642
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...
CVE-2026-81642: Heap-based Buffer Overflow
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remot...
PT-2026-93373
Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions prior to 1.26.1 Description A heap-based buffer overflow exists in the DNSSEC validator of the Unbound DNS resolver. The issue occurs during the preparation of a DNSKEY digest within the ds create dnskey digest...
Linux Distros Unpatched Vulnerability : CVE-2026-81642
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code...
PT-2026-93374
Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions prior to 1.26.1 Description A heap buffer overflow exists in the DNSSEC validator. The issue occurs during CNAME synthesis when an upstream response requires the enforcement of a maximum TTL value in the packet...
PT-2026-94131
Summary The XSS blueprint validator Security::detectXss runs on the raw page content before Twig processing. An attacker can use Twig's string concatenation operator to dynamically construct an event handler name at render time. The validator sees "on" "error" - a harmless Twig expression - and...
EUVD-2026-78070
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, toabsolutenormalizedpath in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before iscriticalpath evaluates Lua...
CVE-2026-53713
Envoy Gateway (an open-source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway) has an authentication bypass in its Lua validator. Prior to versions 1.7.4 and 1.8.1 , the to_absolute_normalized_path function in internal/gatewayapi/luavalidator/security.lua ...
CVE-2026-53713 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, toabsolutenormalizedpath in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before iscriticalpath evaluates Lua...
Linux Distros Unpatched Vulnerability : CVE-2026-89492
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate directory-index entry counts when reading metadata ocfs2validatedxleaf and ocfs2validatedxroot check the ECC and signature of an...
CLSA-2026-1789162879 TuxCare security update for validator (1 CVE)
TuxCare rebuilt validator to address 1 CVE. Fixed in 4.4.0-tuxcare.2...
CLSA-2026-1789161525 TuxCare security update for validator (2 CVEs)
TuxCare rebuilt validator to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...
CLSA-2026-1789161501 TuxCare security update for validator (1 CVE)
TuxCare rebuilt validator to address 1 CVE. Fixed in 4.4.0-tuxcare.1...
ROOT-APP-NPM-CVE-2021-3765 CVE-2021-3765 in validator - Patched by Root
Root has patched CVE-2021-3765 in the validator package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-XX4C-JJ58-R7X6 GHSA-xx4c-jj58-r7x6 in validator - Patched by Root
Root has patched GHSA-xx4c-jj58-r7x6 in the validator package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-12758 CVE-2025-12758 in validator - Patched by Root
Root has patched CVE-2025-12758 in the validator package for Root:npm. Multiple fixed versions available...
PT-2026-96067
Root has patched GHSA-xx4c-jj58-r7x6 in the validator package for Root:npm. Multiple fixed versions available...