CVE-2026-115383

A flaw was found in Wasmtime. This vulnerability allows an untrusted guest module to cause a Denial of Service DoS by triggering a host application crash. When the WebAssembly exceptions feature is enabled, Wasmtime improperly validates imported tags that use subtypes of expected types. A malicio...

CVE-2026-115382

A flaw was found in Wasmtime. A guest WebAssembly application can trigger a Denial of Service DoS by specifying a zero timeout value in an HTTP request option. Because the runtime fails to validate this configuration before passing it to an underlying system library, an internal panic occurs that...

CVE-2026-115379

A flaw was found in Wasmtime. When compiling WebAssembly Wasm modules, object references across function calls may fail to be properly tracked by Garbage Collection GC, the system responsible for automated memory cleanup. An attacker who can supply a crafted module can trigger garbage collection ...

CVE-2026-101803

A flaw was found in the XML component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101802

A flaw was found in the MySQL Server Parser component. An authenticated remote attacker with low privileges can exploit this vulnerability through network access using multiple protocols. A successful attack can cause the service to hang or repeatedly crash, resulting in a Denial of Service DoS...

CVE-2026-101801

A flaw was found in the Server Optimizer component of MySQL. A remote attacker with high privileges can exploit this vulnerability across network protocols to cause the database to hang or repeatedly crash. This issue leads to a complete Denial of Service DoS, rendering the service unavailable to...

CVE-2026-101800

A flaw was found in the Security: Privileges component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact. Mitigation To...

CVE-2026-101799

A flaw was found in the Group Replication GCS component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101798

A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability by submitting crafted requests across supported protocols. Successful exploitation allows the attacker to cause the database server to hang or crash...

CVE-2026-115355

A flaw was found in Mistune. A remote attacker can exploit a path traversal vulnerability in the Include directive by supplying manipulated file paths to access and read arbitrary files on the system. Furthermore, an attacker can inject malicious content through unescaped error messages and...

CVE-2026-115348

A flaw was found in mistune. A remote, unauthenticated attacker can exploit an algorithmic complexity vulnerability in the inline link parser by submitting specially crafted Markdown input containing numerous unbalanced brackets. This forces repeated forward scans during text parsing, consuming...

CVE-2026-115347

A flaw was found in mistune. A remote attacker can exploit an inefficient algorithmic complexity issue in the link text parsing logic by submitting specially crafted Markdown input containing long sequences of unmatched square brackets. Processing this input causes repeated forward scans, leading...

CVE-2026-113872

A flaw was found in multer. A remote attacker could cause a Denial of Service DoS by sending and abruptly aborting a file upload request when an asynchronous file filter is configured. When the aborted request's pending filter callback finishes, it triggers an unhandled stream error, leading to a...

CVE-2026-109714

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout component...

CVE-2026-101795

A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101794

A flaw was found in the XML component of MySQL. An authenticated, low-privileged remote attacker with network access can exploit this vulnerability to cause a Denial of Service DoS. Successful attacks can result in a hang or frequently repeatable server crash, rendering the database unavailable...

CVE-2026-101789

A flaw was found in the MySQL Optimizer component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network to cause a Denial of Service DoS. Successful exploitation allows the attacker to hang or repeatedly crash the server, disrupting database...

CVE-2026-101788

A flaw was found in MySQL Server and MySQL Cluster within the Server Components Services. This vulnerability allows an unauthenticated remote attacker with network access via multiple protocols to cause a Denial of Service DoS. A successful attack can cause the database server to hang or repeated...

CVE-2026-101787

A flaw was found in MySQL within the Server Optimizer component. An authenticated remote attacker with high privileges can exploit this vulnerability over the network to cause the database to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS for the...

CVE-2026-101784

A flaw was found in the query optimizer component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service DoS. Successful exploitation allows the attacker to hang or repeatedly crash the...

CVE-2026-101780

A flaw was found in the MySQL Server X Plugin component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability through network protocol requests. Successful exploitation allows the attacker to cause the database server to hang or repeatedly crash,...

CVE-2026-101778

A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101776

A flaw was found in the MySQL Group Replication plugin. A remote attacker with high privileges and network access can exploit this vulnerability across multiple protocols. Successful exploitation allows the attacker to cause the service to hang or crash repeatedly, resulting in a complete Denial ...

CVE-2026-101766

A flaw was found in the MySQL replication component. A remote, highly privileged attacker could exploit this vulnerability over the network to cause MySQL Server or MySQL Cluster to hang or crash repeatedly. This issue leads to a complete denial of service DoS, making the database service...

CVE-2026-101762

A flaw was found in the Security: Encryption component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101761

A flaw was found in MySQL. An unauthenticated remote attacker with network access via multiple protocols can exploit this vulnerability in the security encryption component to cause the service to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS...

CVE-2026-101760

A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a denial of service DoS...

CVE-2026-101754

A flaw was found in MySQL client programs. A remote attacker with high privileges and network access can exploit this vulnerability to compromise the system. Successful exploitation allows the attacker to cause the database server to hang or repeatedly crash, resulting in a complete Denial of...

CVE-2026-115352

A flaw was found in mistune. This algorithmic complexity vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by submitting specially crafted Markdown input containing long sequences of unmatched bracket characters. When parsing this malformed input, the inline...

CVE-2026-115349

A flaw was found in mistune. This flaw allows a remote attacker to cause a Denial of Service DoS by submitting crafted Markdown input containing deeply nested square brackets. Processing this input triggers inefficient parsing behavior in the link text parser, exhausting server processor resource...

CVE-2026-111181

A flaw was found in body-parser. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request with compressed content containing unexpected trailing data. Because the application fails to handle decompression stream errors after processing the...

CVE-2026-101751

A flaw was found in MySQL. An authenticated, remote attacker with high privileges could cause a complete Denial of Service DoS by exploiting a vulnerability in the Group Replication component over the network. Successful exploitation causes the server or cluster to hang or crash repeatedly,...

CVE-2026-101750

A flaw was found in the MySQL Clone Plugin. An authenticated remote attacker with high privileges can exploit this vulnerability over network protocols to trigger an abnormal condition. A successful attack allows the attacker to cause the database server to hang or repeatedly crash, resulting in ...

CVE-2026-101748

A flaw was found in the audit component of MySQL. An authenticated remote attacker with low privileges can exploit this vulnerability over the network across multiple protocols. Successful exploitation allows the attacker to cause a hang or frequently repeatable crash, resulting in a Denial of...

CVE-2026-101747

A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101733

A flaw was found in the MySQL JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network using multiple protocols. A successful attack can cause the server to hang or repeatedly crash, resulting in a complete Denial of Service DoS...

CVE-2026-101732

A flaw was found in the Optimizer component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101731

A flaw was found in the MySQL Server Optimizer. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the server to hang or crash repeatedly. This issue results in a complete denial of service DoS for the database service...

CVE-2026-101730

A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the database server to hang or repeatedly crash. This issue results in a complete Denial of Service DoS of affected MySQL Server and MySQ...

CVE-2026-101729

A flaw was found in the MySQL replication component. A high-privileged remote attacker with network access can exploit this vulnerability to trigger a hang or repeatable crash. Successful exploitation results in a complete Denial of Service DoS of the database service...

CVE-2026-101727

A flaw was found in MySQL within the Server Replication component. A remote attacker with high privileges and network access can exploit this vulnerability to trigger an unexpected hang or repeatable crash. This issue results in a complete Denial of Service DoS, rendering the database service...

CVE-2026-101728

A flaw was found in MySQL's Pluggable Auth component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network across multiple protocols. Successful exploitation allows the attacker to cause the database service to hang or repeatedly crash, resulting in...

CVE-2026-101726

A flaw was found in the C API component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101725

A flaw was found in the C API component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101724

A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101721

A flaw was found in mysql. A remote attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service DoS. By targeting the server component services, the attacker can cause the database to hang or crash repeatedly, disrupting availability for legitimate...

CVE-2026-101720

A flaw was found in MySQL connection handling. An unauthenticated remote attacker with network access can exploit this vulnerability to compromise the database server. Successful exploitation allows an attacker to perform unauthorized data modifications, resulting in the creation, alteration, or...

CVE-2026-101627

A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101624

A flaw was found in the InnoDB component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101623

A flaw was found in the Optimizer component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...