Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: In the xtables function, there is a issue where walkers that process option data may read the last byte of the option area, which is less than 1 byte long. When the last byte of an option is not a single-byte character...

CVE-2026-93687

A flaw was found in braces. This stack overflow vulnerability exists in the recursive Abstract Syntax Tree AST walkers due to a lack of depth guards. A remote attacker can exploit this by supplying deeply nested brace patterns, leading to the exhaustion of the call stack and termination of the...

Linux Distros Unpatched Vulnerability : CVE-2026-93687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace...

GHSA-VFJ7-8CJW-P6XM braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

AZL-103481 CVE-2026-93687 affecting package python-tensorboard 2.16.2-6

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

DEBIAN-CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

AZL-103445 CVE-2026-93687 affecting package nodejs-nodemon 2.0.3-5

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

UBUNTU-CVE-2026-93687

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687

CVE-2026-93687 affects the braces library (micromatch) through version 3.0.3 . The vulnerability resides in the recursive AST walkers (in compile.js, parse.js, and expand.js) that lack depth guards. An attacker can supply deeply nested brace patterns under the character limit to exhaust the call ...

CVE-2026-93687 braces through 3.0.3 Stack Overflow via Deeply Nested Patterns

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

PT-2026-99966

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

CVE-2026-93687: Uncontrolled Recursion

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

PT-2026-95431

Name of the Vulnerable Software and Affected Versions braces versions prior to 3.0.4 Description A stack overflow occurs in the recursive AST Abstract Syntax Tree walkers due to a lack of depth guards. An attacker can provide deeply nested brace patterns that remain within the character limit to...

PT-2026-99971

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

PT-2026-105542

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

SUSE CVE-2026-43452

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: guard option walkers against 1-byte tail reads When the last byte of options is a non-single-byte option kind, walkers that advance with i += opi + 1 ? : 1 can read opi + 1 past the end of the option area. Add...

EUVD-2026-28758

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: guard option walkers against 1-byte tail reads When the last byte of options is a non-single-byte option kind, walkers that advance with i += opi + 1 ? : 1 can read opi + 1 past the end of the option area. Add...