CVE-2026-77387

geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point a...

CVE-2026-63686

A NULL pointer dereference in modxml2enc in Apache Software Foundatio...

CVE-2026-93546

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 al...

CVE-2026-79768

Path equivalence: '/./' single dot directory vulnerability in Apache...

CVE-2026-73637

Use after free in modauthdigest in Apache Software Foundation Apache...

CVE-2026-73636

Authentication bypass by capture-replay in modauthdigest in Apache S...

CVE-2026-63718

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response S...

CVE-2026-63292

Stack-based buffer overflow in modvhostalias in Apache Software Foun...

CVE-2026-63045

Improper validation of FTP PASV reply address in modproxyftp in Apac...

CVE-2026-59797

Improper Privilege Management vulnerability in Apache HTTP Server's mo...

CVE-2026-59685

Out-of-bounds Write vulnerability in Apache HTTP Server on Windows whi...

CVE-2026-58415

Internal state files accessible to external parties in moddavfs in A...

CVE-2026-57941

Use After Free vulnerability in Apache HTTP Server's modhttp2via shar...

CVE-2026-56449

Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyht...

CVE-2026-56154

Use After Free vulnerability in Apache HTTP Server's modrewrite when...

CVE-2026-56153

Out-of-bounds Write vulnerability in Apache HTTP Server's modcharset...

CVE-2026-48005

Missing authentication checks in modauthdigest in Apache Software Fo...

CVE-2026-47360

Exposure of Sensitive Information to an Unauthorized Actor vulnerabili...

CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modhear...

CVE-2026-42356

Deployment of wrong handler vulnerability in Apache HTTP Server allows...

CVE-2026-42528

A memory calculation bug in moddav in Apache httpd 2.4.67 and earlier...

CVE-2026-102505

Imager versions before 1.037 for Perl overflow a heap buffer fetching...

CVE-2026-102504

Imager versions before 1.037 for Perl exit the process reading a raw i...

CVE-2026-103754

A flaw was found in ansible-runner. The unstreamdir function, which...

CVE-2026-103680

A flaw was found in tnef. A heap-based buffer overflow can occur in th...

CVE-2026-103679

A flaw was found in tnef. A remote attacker could exploit this vulnera...

CVE-2026-103678

A flaw was found in tnef. An attacker can exploit this vulnerability b...

CVE-2026-103263

Tornado before 6.5.9 contains a path traversal vulnerability in Static...

CVE-2026-103261

Tornado before 6.5.9 fails to limit the number of query string fields...

CVE-2026-103262

Tornado versions before 6.5.9 contain an unbounded memory accumulation...

CVE-2026-103431

colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 termin...

CVE-2026-103641

A flaw was found in GEGL. The Radiance HDR loader reads past the end o...

CVE-2026-101887

BlueALSA bluez-alsa/bluealsad contains a division-by-zero vulnerability in the LC3plus sink decoder a2dp-lc3plus.c, a2dplc3plusdecthread that allows a Bluetooth-adjacent attacker to crash the daemon by sending a crafted RTP media header with an attacker-controlled frame count field set to zero...

CVE-2026-103531

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument typeattr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called...

CVE-2026-101283

iperf3 3.20–3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22...

CVE-2026-103001

PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT.mergeoptions method can modify a caller-supplied mutable options mapping when verifysignature is false. If an application reuses that same mapping for a later decode or decodecomplete call and...

CVE-2026-101276

iperf3 3.21 esnet/iperf contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog servertimerproc frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperfstream; fixed in 3.22...

CVE-2026-103000

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF can provide unusually large alphabetical page-label values that cause pypdf/pagelabels.py to generate strings beyond a reasonable page-label length when an application retrieves document page labels, consuming...

CVE-2026-102999

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachments API in pypdf/doccommon.py to reparse the full attachment list for each content lookup, producing repeated work and long runtimes when a...

CVE-2026-102998

pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/appearancestream.py appearance-stream generation to repeat invariant selection-data work inside a loop when an application updates fields with flattening enabled,...

CVE-2026-102997

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode stream with padded data can force pypdf/filters.py to use inefficient byte-by-byte decompression while the earlier recovery counter fails to advance for bytes that...

CVE-2026-102996

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/font.py Font.collectttt1characterwidths to process entries beyond the 256 character codes meaningful for a simpl...

CVE-2026-102995

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/cmap.py parsebfchar to decode and retain oversized values during operations such as text extractio...

CVE-2026-102994

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that continue for a long time without whitespace can cause pypdf/reader.py and pypdf/generic/base.py to scan excessive input through...

CVE-2026-102993

pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values that cause pypdf/pagelabels.py to generate excessively large numeral strings when an application retrieves document page labels, consuming large amounts of...

CVE-2026-102991

Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath, while Template.init in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpa...

CVE-2026-103387

A weakness has been identified in garycourt uri-js up to 4.4.1. This affects the function URI.parse of the file src/schemes/mailto.ts of the component Mailto Header Handler. This manipulation of the argument to causes uncaught exception. The attack may be initiated remotely. The exploit has been...

CVE-2026-102990

basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list can be forced by a malicious or compromised FTP server to spend quadratic CPU time parsing a directory listing because the RELINE expression in src/parseListUnix.ts backtracks across adjacent variable-length owner and group field...

CVE-2026-103399

A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...

CVE-2026-103500

An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4...