CVE-2026-97916

A flaw was found in the Linux kernel's Intel VPU ivpu driver. A compromised device firmware can cause a Denial of Service DoS by modifying log buffer metadata in shared memory. Because the host driver re-reads buffer size fields from shared memory after validating them, the firmware can alter the...

GHSA-2JFJ-6HJV-FM6J undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

Impact undici's interceptors.cache does not handle Set-Cookie in the cache path. In shared-cache mode type: 'shared', the default, a cacheable response for example Cache-Control: public, max-age=... carrying a Set-Cookie header is stored, and the stored Set-Cookie is re-served to a later caller...

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

Impact undici's interceptors.cache does not handle Set-Cookie in the cache path. In shared-cache mode type: 'shared', the default, a cacheable response for example Cache-Control: public, max-age=... carrying a Set-Cookie header is stored, and the stored Set-Cookie is re-served to a later caller...

CVE-2026-102714

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

Quarterly WordPress Threat Intelligence Report – Q2 2026

As the leader in WordPress security, Wordfence provides unparalleled security coverage that fully encompasses protection, active monitoring, detection, and response all built around our threat intelligence, demonstrating a strong commitment to security. Our mission is to ensure comprehensive...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the Squirrel.Mac installer component SQRLInstaller, where the target...

Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation

Summary When enablejsonp=True, oauthlib's RevocationEndpoint reflects the user-supplied callback parameter directly into JavaScript response bodies on both success and error paths without validating that it is a legal JSONP callback name. This allows arbitrary JavaScript response generation inste...

GHSA-HJ66-6F7G-4R5V Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation

Summary When enablejsonp=True, oauthlib's RevocationEndpoint reflects the user-supplied callback parameter directly into JavaScript response bodies on both success and error paths without validating that it is a legal JSONP callback name. This allows arbitrary JavaScript response generation inste...

CVE-2026-102714

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

CVE-2026-102714

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

CVE-2026-102714

"nxicmpv6validateoptions" scans the option area with "while length 2" "common/src/nxicmpv6validateoptions.c:79". An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns "NXSUCCESS". Its zero-length rejecti...

CVE-2026-102714

The Netxduo stack is vulnerable to a memory safety issue in the _nx_icmpv6_validate_options() function within common/src/nx_icmpv6_validate_options.c. The function fails to adequately validate the tail of an ICMPv6 option area, leaving a one- or two-byte residue unexamined while returning NX_SUCC...

EUVD-2026-89177

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

CVE-2026-102714

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

CVE-2026-97902

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by initiating nested filesystem freeze and thaw operations. An incorrect error code returned during nested thaw requests causes the kernel to retain an elevated freeze counter on the underlying block device...

Cross-site Scripting (XSS)

Overview serialize-javascript is a package to serialize JavaScript to a superset of JSON that includes regular expressions and functions. Affected versions of this package are vulnerable to Cross-site Scripting XSS via a regex flaw in SCRIPTCLOSEREGEXP that allows a live tag to survive...

CVE-2026-54872

A flaw was found in OpenSSL. A timing side-channel vulnerability in generic elliptic curve scalar multiplication allows an attacker to recover private cryptographic keys. When performing signature operations, such as the Elliptic Curve Digital Signature Algorithm ECDSA or SM2, using curves withou...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the handling of SSLsetSSLCTX called mid handshake, which switches the context without refreshing the recorded certificate slot count, so a replacement context recognizing more provider signature algorithms indexes...

AZL-105366 CVE-2026-77696 affecting package openssl-fips-provider 3.1.2-2

Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...

AZL-105570 CVE-2026-77696 affecting package openssl 3.3.7-6

Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...