4071 matches found
CVE-2026-107294
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, webfetchtool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body before enforcing content-size controls. An...
Important: Red Hat Security Advisory: rhc-worker-playbook security update
An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2026-105830
league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...
CVE-2026-42945
CVE-2026-42945 PoC（Go） Italiano | English Strumento di rilevamento e sfruttamento ausiliario per l'implementazione di nginx HTTP/2 CVE-2026-42945 , utilizzato per verificare la presenza della vulnerabilità in ambienti autorizzati , confrontare gli effetti delle correzioni e riprodurre il...
CVE-2026-105830 league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser
league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...
EUVD-2026-95017
league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...
CVE-2026-105830
The league/commonmark library (versions 2.0.0 before 2.10.2 ) is vulnerable to a quadratic-time denial of service (DoS) attack within the GitHub Flavored Markdown Table extension. The issue resides in the TableStartParser::tryStart() block-start scan, where unauthenticated attackers can submit a ...
CVE-2026-107575 Inefficient Algorithmic Complexity in hMailServer
Inefficient algorithmic complexity in the SPF macro expansion of Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to consume worker-thread time by publishing a crafted SPF record. RFC 7208 section 7.1 requires a name too long to look up to lose whole labels...
CVE-2026-107575 Inefficient Algorithmic Complexity in hMailServer
Inefficient algorithmic complexity in the SPF macro expansion of Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to consume worker-thread time by publishing a crafted SPF record. RFC 7208 section 7.1 requires a name too long to look up to lose whole labels...
CVE-2026-107575
Progressive Robot hMailServer versions 6.3.4 and 6.3.5 are vulnerable to an inefficient algorithmic complexity flaw in the SPF macro expansion. A remote unauthenticated attacker can consume worker-thread time by publishing a crafted SPF record where the domain-spec expands via macros to a name ex...
fix_nginx_cve_2026_42945
NGINX CVE-2026-42945 Script di correzione con un clic Rileva automaticamente la distribuzione del sistema, aggiorna NGINX alla versione corretta ≥1.30.1, esegue il backup della configurazione e ripristino automatico. Descrizione della vulnerabilità ID vulnerabilità: CVE-2026-42945 Nome...
CLEANSTART-2026-BO31904 Security fix for ghsa-f88m-g3jw-g9cj applied in: langfuse-worker 3.225.9-r3
Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-PO83122 Security fix for ghsa-2xp9-vwfh-vxw4 applied in: langfuse-worker 3.225.9-r3
Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UG53447 Security fix for ghsa-rgj7-g3m4-5g8c applied in: langfuse-worker 3.225.9-r3
Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-DF16083 Security fix for CVE-2026-45820 applied in: langfuse-worker 3.225.9-r3
Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-LG90193 Next
Security vulnerability affects the langfuse-worker package. Next...
CLEANSTART-2026-JG00673 uuid before 14
Security vulnerability affects the langfuse-worker package. uuid before 14...
CLEANSTART-2026-SY59629 PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree
Security vulnerability affects the langfuse-worker package. PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree...
CLEANSTART-2026-LJ34730 node-csv is a full-featured CSV parser with a simple API that is tested against large datasets
Security vulnerability affects the langfuse-worker package. node-csv is a full-featured CSV parser with a simple API that is tested against large datasets...