61092 matches found
CLSA-2026-1784856386 TuxCare security update for fast-xml-parser (1 CVE)
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.7-tuxcare.1...
CLSA-2026-1781744123 TuxCare security update for fast-xml-parser (2 CVEs)
TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 3.19.0-tuxcare.1...
CLSA-2026-1781744139 TuxCare security update for fast-xml-parser (7 CVEs)
TuxCare rebuilt fast-xml-parser to address 7 CVEs. Fixed in 4.4.0-tuxcare.1...
CLSA-2026-1781744131 TuxCare security update for fast-xml-parser (2 CVEs)
TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 3.14.0-tuxcare.1...
CLSA-2026-1781744124 TuxCare security update for fast-xml-parser (2 CVEs)
TuxCare rebuilt fast-xml-parser to address 2 CVEs. Fixed in 3.17.5-tuxcare.1...
CLSA-2026-1781744119 TuxCare security update for fast-xml-parser (6 CVEs)
TuxCare rebuilt fast-xml-parser to address 6 CVEs. Fixed in 4.2.7-tuxcare.1...
CLSA-2026-1777336754 TuxCare security update for fast-xml-parser (1 CVE)
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.6-tuxcare.1...
CLSA-2026-1776818199 TuxCare security update for fast-xml-parser (4 CVEs)
TuxCare rebuilt fast-xml-parser to address 4 CVEs. Fixed in 4.5.3-tuxcare.2...
CLSA-2026-1774398086 TuxCare security update for fast-xml-parser (1 CVE)
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.3-tuxcare.1...
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: Upgrade netty to upstream version 4.1.136 and netty-tcnative to version 2.0.80 Final. Security issues fixed CVE-2026-44891: memory exhaustion in io.netty:netty-codec-stomp bsc1271435. CVE-2026-55831: resource exhaustion/DoS in...
SUSE-SU-2026:3482-1 Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: Upgrade netty to upstream version 4.1.136 and netty-tcnative to version 2.0.80 Final. Security issues fixed - CVE-2026-44891: memory exhaustion in io.netty:netty-codec-stomp bsc1271435. - CVE-2026-55831: resource exhaustion/DoS in...
Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)
SummaryFramenetCorpusReader.framename interpolates a caller-supplied frame name into an XML file path that is read with the builtin open, bypassing CorpusReader.open and the nltk.pathsec sandbox — including strict ENFORCE=True mode. A ../ sequence in the name escapes the corpus root, yielding an...
PYSEC-2026-3584 Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)
Summary FramenetCorpusReader.framename interpolates a caller-supplied frame name into an XML file path that is read with the builtin open, bypassing CorpusReader.open and the nltk.pathsec sandbox — including strict ENFORCE=True mode. A ../ sequence in the name escapes the corpus root, yielding an...
datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate
SummaryWhen generating models from an XML Schema --input-file-type xmlschema, datamodel-code-generator resolves , , , and schemaLocation attributes against the source directory and reads the target with no restriction to the input/base directory. An attacker who controls the input XSD can read...
Exploit for Improper Input Validation in Google Chrome
--- CVE-2026-11112 – XXE via SVG Image Upload Program C...
PT-2026-74120
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.3-tuxcare.1...
PT-2026-74521
TuxCare rebuilt fast-xml-parser to address 4 CVEs. Fixed in 4.5.3-tuxcare.2...
PT-2026-75111
TuxCare rebuilt fast-xml-parser to address 7 CVEs. Fixed in 4.4.0-tuxcare.1...