18717 matches found
AZL-93156 CVE-2026-56852 affecting package coredns for versions less than 1.11.4-20
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93204 CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93078 CVE-2026-56852 affecting package buildah 1.43.1-3
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93285 CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93210 CVE-2026-56852 affecting package kata-containers for versions less than 3.32.0.kata0-1
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93162 CVE-2026-56852 affecting package dcos-cli for versions less than 1.2.0-22
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93174 CVE-2026-56852 affecting package etcd for versions less than 3.5.33-1
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93219 CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93150 CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93207 CVE-2026-56852 affecting package jx for versions less than 3.10.182-5
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93075 CVE-2026-56852 affecting package azl-otel-collector 0.127.0-1
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93165 CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93099 CVE-2026-56852 affecting package yq 4.45.1-1
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93108 CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93228 CVE-2026-56852 affecting package kured for versions less than 1.15.0-6
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93321 CVE-2026-56852 affecting package telegraf for versions less than 1.31.0-27
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93327 CVE-2026-56852 affecting package vitess for versions less than 19.0.4-11
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93225 CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93177 CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93276 CVE-2026-56852 affecting package packer for versions less than 1.9.5-18
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93159 CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93183 CVE-2026-56852 affecting package gh for versions less than 2.62.0-20
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93282 CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93201 CVE-2026-56852 affecting package ignition-flatcar for versions less than 2.22.0-6
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93216 CVE-2026-56852 affecting package keda for versions less than 2.14.1-16
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93111 CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93186 CVE-2026-56852 affecting package git-lfs for versions less than 3.6.1-5
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93171 CVE-2026-56852 affecting package docker-compose for versions less than 2.27.0-13
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93144 CVE-2026-56852 affecting package cf-cli for versions less than 8.7.11-8
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93315 CVE-2026-56852 affecting package skopeo for versions less than 1.14.4-12
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93318 CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93081 CVE-2026-56852 affecting package cri-o 1.30.1-1
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93093 CVE-2026-56852 affecting package podman 5.6.1-10
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93141 CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-11
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93168 CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93273 CVE-2026-56852 affecting package opa for versions less than 0.63.0-5
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93279 CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93087 CVE-2026-56852 affecting package kata-containers-preview 3.27.0~preview2-2
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93264 CVE-2026-56852 affecting package moby-engine for versions less than 25.0.3-19
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93147 CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
AZL-93198 CVE-2026-46600 affecting package golang 1.25.14-1
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
AZL-93237 CVE-2026-12547 affecting package libsoup 3.4.4-16
SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority host:port. When the proxy configuration changes e.g., via system settings or WPAD, cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials...
AZL-93102 CVE-2026-16493 affecting package ansible 2.17.11-1
A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...
AZL-93258 CVE-2026-59850 affecting package libssh for versions less than 0.10.6-9
A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...
AZL-93240 CVE-2026-59848 affecting package libssh for versions less than 0.10.6-9
A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service...
AZL-93246 CVE-2026-59847 affecting package libssh for versions less than 0.10.6-9
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...
AZL-93249 CVE-2026-59845 affecting package libssh for versions less than 0.10.6-9
A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...
AZL-93255 CVE-2026-59844 affecting package libssh for versions less than 0.10.6-9
A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests...
AZL-93243 CVE-2026-59843 affecting package libssh for versions less than 0.10.6-9
A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...
AZL-93306 CVE-2026-16461 affecting package rpcbind 1.2.9-1
A stack-based buffer overflow was found in rpcbind's rpcinfo utility. In rpcbdump short mode used by rpcinfo -s, version numbers from a remote RPCBPROCDUMP reply are written into a fixed-size stack buffer without bounds checking. A user or administrator who runs rpcinfo -s against a malicious or...