CLSA-2026-1792304223 TuxCare security update for @babel/helper-wrap-function (1 CVE)

TuxCare rebuilt @babel/helper-wrap-function to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792304214 TuxCare security update for @babel/helper-wrap-function (2 CVEs)

TuxCare rebuilt @babel/helper-wrap-function to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792304213 TuxCare security update for @babel/helper-wrap-function (1 CVE)

TuxCare rebuilt @babel/helper-wrap-function to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792304211 TuxCare security update for @babel/helper-wrap-function (1 CVE)

TuxCare rebuilt @babel/helper-wrap-function to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-95828

Name of the Vulnerable Software and Affected Versions Pod::Text versions prior to 6.1.1 Description Formatting a POD document with excessive =over nesting can lead to CPU and memory exhaustion. Each =over element increases the margin, which the wrap function subtracts from the output width to...

CVE-2026-73645 OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.

OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the ERC7984 contract tracked confidential total supply with an euint64 value, and an overflowing internal mint operation could fail silently. The wrap and onTransferReceiv...

CVE-2026-73645

OpenZeppelin Confidential Contracts ERC7984 wrapper contains a defect prior to 0.3.1 where an overflowing internal _mint on the ERC7984ERC20Wrapper could silently fail. The wrap and onTransferReceived paths did not handle this failure, allowing a user to transfer the underlying token without rece...

CVE-2026-73645 OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.

OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the ERC7984 contract tracked confidential total supply with an euint64 value, and an overflowing internal mint operation could fail silently. The wrap and onTransferReceiv...

Integer Overflow or Wraparound

Overview @openzeppelin/confidential-contracts is a Smart Contract library for use with confidential coprocessors Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the wrap and onTransferReceived functions used by the ERC7984 contract. An attacker can cause user...

NULL Pointer Dereference

Overview PyMuPDF is an A high performance Python library for data extraction, analysis, conversion & manipulation of PDF and other documents. Affected versions of this package are vulnerable to NULL Pointer Dereference via the breakwordforoverflowwrap function when rendering a malformed EPUB...

drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.

...

django: Potential denial-of-service vulnerability in django.utils.text.wrap()

A potential denial of service vulnerability exists in django.utils.text.wrap and the wordwrap template filter. When processing extremely long strings, these functions may cause excessive resource consumption, potentially leading to service disruption...

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2025-26699: Fixed potential denial-of-service in django.utils.text.wrap bsc1239052. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

DEBIAN-CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

PYSEC-2025-13

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

Django security vulnerabilities

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django versions prior to 5.1.7, 5.0.13, and 4.2.20, which...

The user will receive more/less funds when calling unwrap() if the price of USDY falls/rises than expected

Lines of code Vulnerability details Impact There is a wrap function called by users to wrap their USDY tokens . In the future, to withdraw tokens, the user calls the unwrap function . However, in the unwrap function, the user can have more funds in case the price of USDY falls. Based on the case...

Unlimited minting of fractional tokens by calling Pair.wrap() multiple times

Lines of code Vulnerability details Impact User can mint an unlimited amount of fractional tokens and break the protocol by selling the tokens. Proof of Concept NFTs can be traded for 1e18 fractional tokens by calling the function wrap. Wrap calls validateTokenIdstokenIds, proofs which in turn ru...

Possible Reentrancy Vulnerability

Lines of code Vulnerability details Impact In Add function, in case of non Eth Base Token, LP Tokens are minted for LP Provider before transferring the Base Token from Provider to Contract. In remove function, Fractional Tokens are Transferred to LP Provider before Burning the LP Token. In wrap...

DoS in wrap and unwrap

Lines of code Vulnerability details Impact the code is doing wrong check, so when things will work it will revert. Proof of Concept In the function wrap there is this lines: if error = ICERC20token.mintamount != NOERROR revert FuseErrorerror; but mint returns the amount that minted, so when error...