425118 matches found
PT-2026-131477
TuxCare rebuilt @angular/platform-browser-dynamic to address 3 CVEs. Fixed in 5.1.2-tuxcare.6...
PT-2026-131420
TuxCare rebuilt @angular/platform-browser-dynamic to address 11 CVEs. Fixed in 6.0.1-tuxcare.4...
PT-2026-130693
TuxCare rebuilt @babel/helper-module-transforms to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-131920
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 10.2.5-tuxcare.2...
PT-2026-117223
A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load word2vec as vocab tensor of the file hanlp/utils/torch util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely...
PT-2026-133161
TuxCare rebuilt @babel/plugin-transform-block-scoping to address 1 CVE. Fixed in 7.24.5-tuxcare.2...
PT-2026-130780
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 18.2.12-tuxcare.3...
PT-2026-117670
Name of the Vulnerable Software and Affected Versions Pillow versions 8.1.0 through 12.x Description Pillow contains an out-of-bounds read issue when decoding certain malformed compressed TIFF files. The problem occurs in the decodeTile and decodeAsRGBA functions within src/libImaging/TiffDecode....
PT-2026-117651
Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The OSDP Control Panel reply parser cp decode response in subsys/mgmt/osdp/src/osdp cp.c fails to properly validate the payload length for REPLY KEYPPAD and REPLY RAW reply types. An attacker...
PT-2026-117322
Name of the Vulnerable Software and Affected Versions Apache Answer versions prior to 2.0.3 Description An authentication bypass exists in the reaction API endpoint. The system fails to enforce content visibility controls, which allows unauthorized users to read reaction metadata from restricted...
PT-2026-117432
Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...
PT-2026-131482
TuxCare rebuilt @angular/platform-browser-dynamic to address 3 CVEs. Fixed in 6.0.1-tuxcare.6...
PT-2026-117329
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description Apache Camel HTTP, Netty HTTP, Undertow, and Vert.x HTTP components contain an issue where inbound messages can override the endpoint URI using...
PT-2026-131094
TuxCare rebuilt @angular/platform-server to address 14 CVEs. Fixed in 8.2.14-tuxcare.9...
PT-2026-117416
Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that allows attackers to read past the EDID buffer via oversized data block lengths. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or file...
PT-2026-117292
Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...
PT-2026-117410
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering...
PT-2026-117357
Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. When the component wrote generated key material to disk it did so with the permissions the process default umask produced, rather than...
PT-2026-130919
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 8.0.3-tuxcare.3...
PT-2026-117230
The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in th...
PT-2026-131869
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 11.2.14-tuxcare.12...
PT-2026-131894
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 19.2.14-tuxcare.4...
PT-2026-131794
TuxCare rebuilt @angular/service-worker to address 3 CVEs. Fixed in 19.2.23-tuxcare.3...
PT-2026-132023
TuxCare rebuilt @babel/helper-builder-react-jsx to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-129106
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved...
PT-2026-132895
Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode hv. A quoted key of 24 or more bytes, or one containing a non-ASCII byte or an escape sequence, is decoded into a new scalar. Nothing frees that scalar when t...
PT-2026-130866
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 5.1.2-tuxcare.8...
PT-2026-117558
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-130950
TuxCare rebuilt @angular/platform-browser to address 15 CVEs. Fixed in 15.2.9-tuxcare.2...
PT-2026-130889
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 13.3.0-tuxcare.7...
PT-2026-130799
TuxCare rebuilt @angular/platform-browser to address 2 CVEs. Fixed in 14.2.8-tuxcare.4...
PT-2026-130978
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 4.3.5-tuxcare.5...
PT-2026-130820
TuxCare rebuilt @angular/platform-browser to address 2 CVEs. Fixed in 7.2.16-tuxcare.12...
PT-2026-130773
TuxCare rebuilt @angular/platform-browser to address 18 CVEs. Fixed in 17.1.0-tuxcare.2...
PT-2026-132017
TuxCare rebuilt @babel/helper-builder-react-jsx to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-132016
TuxCare rebuilt @babel/helper-builder-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-131024
TuxCare rebuilt @angular/platform-browser to address 2 CVEs. Fixed in 13.3.11-tuxcare.2...
PT-2026-130861
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 18.2.12-tuxcare.8...
PT-2026-131689
TuxCare rebuilt @babel/plugin-transform-block-scoped-functions to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-130981
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 17.3.12-tuxcare.7...
PT-2026-131665
TuxCare rebuilt @angular/platform-browser-dynamic to address 13 CVEs. Fixed in 13.3.0-tuxcare.2...
PT-2026-133049
TuxCare rebuilt @storybook/builder-manager to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-131680
TuxCare rebuilt @angular/platform-browser-dynamic to address 13 CVEs. Fixed in 11.2.0-tuxcare.3...
PT-2026-130887
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 12.2.0-tuxcare.7...
PT-2026-130442
TuxCare rebuilt @angular/localize to address 1 CVE. Fixed in 19.2.25-tuxcare.3...
PT-2026-130832
TuxCare rebuilt @angular/platform-browser to address 3 CVEs. Fixed in 6.1.10-tuxcare.13...
PT-2026-131008
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 12.2.0-tuxcare.2...
PT-2026-131193
TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 15.2.2-tuxcare.5...