CVE-2026-70635 TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

CVE-2023-54389

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54388

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54387

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54386

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54384

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54382

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54381

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54379

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54378

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54377

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54376

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54375

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

Exposure of Data Element to Wrong Session

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the extension tab and scripting APIs not being properly scoped to the...

libgcrypt security update

1.10.0-13 - Bump version to fix wrong build target. 1.10.0.12 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext...

UBUNTU-CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

CVE-2026-18217 Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution

A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can...

CVE-2026-18217

A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can...

python: Python Tarfile: Unexpected file ownership when extracting hardlinks

A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in glXDispChangeDrawableAttributes. A wrong size validation check can read a client-controlled number of bytes, exceeding the request buffer, leading to information disclosure. A write path also exists but requires byte-swapp...