PT-2026-33280

Name of the Vulnerable Software and Affected Versions rsync versions 3.0.1 through 3.4.1 Description The receive xattr function relies on an untrusted length value during a qsort call, which can lead to a use-after-free condition on the receiver side. This occurs when the victim runs the software...

@alfresco/adf-testing (6.0.0-A.2-8258), @algolia/coquille (>=0.0.2, <=0.0.13) +362 more potentially affected by CVE-2026-33228 via flatted (>=3.0.1, <=3.4.1)

flatted NPM version =3.0.1, =0.0.2, =1.1.0, =1.0.0, =1.0.0, =0.0.10, =0.0.11, =0.0.4, =1.0.0, =0.0.20, =0.0.19, =1.2.2, =1.2.2, =1.5.8 and more Source cves: CVE-2026-33228 Source advisory: OSV:GHSA-RF6F-7FWH-WJGH...