106870 matches found
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the TIFF CCITT Group 4 T6 encoding process. An attacker can cause process termination and denial of service by supplying a specially crafted 1x1 Group 4 TIFF image that, when decoded and re-encoded, triggers...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the ICC color profile conversion process when handling a malformed embedded ICC LUT16 profile with more than four output channels. An attacker can cause memory corruption and application termination by supplying a...
EUVD-2026-93574
ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the TIFF CCITT Group 3 T4 encoding process. An attacker can cause memory corruption and terminate the process by providing specially crafted 1-bit image data with narrow width and a large number of rows, leading t...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write through the HistogramEqualization process. An attacker can cause the application to terminate unexpectedly by supplying a specially crafted 32-bit floating-point TIFF image with non-finite values, which leads to an...
CVE-2026-107161 Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients
A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...
GHSA-75QF-886X-5XF2 Backstage: Improper input validation in Confluence to Markdown scaffolder module
Impact Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. Patches Patche...
Backstage: Improper input validation in Confluence to Markdown scaffolder module
Impact Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. Patches Patche...
External Control of File Name or Path
Overview @backstage/plugin-scaffolder-backend-module-confluence-to-markdown is a The confluence-to-markdown module for @backstage/plugin-scaffolder-backend Affected versions of this package are vulnerable to External Control of File Name or Path via the getAndWriteAttachments function in...
GHSA-2CMG-V53W-8XFP Backstage: Improper repository path validation in a Scaffolder backend module
Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. Patches Patched in...
GHSA-CQ7V-RFGC-5C7V Backstage: Improper preservation of access restrictions during service credential delegation
Impact An external service credential configured with access restrictions e.g., read-only could bypass those restrictions by routing requests through plugin delegation paths. This could allow a restricted service to perform operations beyond its intended scope, including write operations on plugi...
EUVD-2026-94012
Backstage: Improper preservation of access restrictions during service credential delegation...
CVE-2026-106571
A flaw was found in ImageMagick. A local attacker can cause a Denial of Service DoS by issuing a specially crafted call to the GetVirtualPixels function. An integer calculation error allows data to be written beyond allocated heap memory boundaries, resulting in an unexpected process crash...
CVE-2026-106108
During an SSG build, page definitions returned by "getSsgPages" can provide custom "dir" and "filename" values. The builder joined those values to "build.distDir" and wrote the generated page without verifying that the final destination remained inside the distribution directory...
Integer Overflow or Wraparound
Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...
Integer Overflow or Wraparound
Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...
Integer Overflow or Wraparound
Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the GetVirtualPixels function. An attacker can cause a crash of the server process by supplying crafted input that triggers an integer calculation error, resulting in a heap buffer write beyond...
Integer Overflow or Wraparound
Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
Integer Overflow or Wraparound
Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...