80179 matches found
CVE-2026-95625
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...
CVE-2026-82331
Improper link resolution before file access 'link following' vulnerability in the tar source plugin of Apache BuildStream running on Python = 3.12, BuildStream = 2.3.0 already makes use of the Python tarfile filter functionality, which blocks the symlink escape Users are recommended to upgrade to...
CVE-2026-91777
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...
CVE-2026-89425
UTF8DataInputJsonParser.reportInvalidToken in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser,...
CVE-2026-91776
TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...
CVE-2026-95897
A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function fromnpystack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...
CVE-2026-95362
Unknown description...
CVE-2026-95368
Unknown description...
CVE-2026-95340
Unknown description...
CVE-2026-95327
Unknown description...
CVE-2026-95317
Unknown description...
CVE-2026-95316
Unknown description...
CVE-2026-95309
Unknown description...
CVE-2026-95285
Unknown description...
CVE-2026-95516
Unknown description...
CVE-2026-95382
Unknown description...
CVE-2026-95294
Unknown description...
CVE-2026-95347
Unknown description...
CVE-2026-95363
Unknown description...
CVE-2026-95332
Unknown description...
CVE-2026-95349
Unknown description...
CVE-2026-95329
Unknown description...
CVE-2026-95384
Unknown description...
CVE-2026-95277
Unknown description...
CVE-2026-95296
Unknown description...
CVE-2026-95299
Unknown description...
CVE-2026-93403
Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin...
CVE-2026-95312
Unknown description...
CVE-2026-95507
Unknown description...
CVE-2026-95375
Unknown description...
CVE-2026-95339
Unknown description...
CVE-2026-95331
Unknown description...
CVE-2026-95380
Unknown description...
CVE-2026-95357
Unknown description...
CVE-2026-95353
Unknown description...
CVE-2026-95322
Unknown description...
CVE-2026-95319
Unknown description...
CVE-2026-95376
Unknown description...
CVE-2026-95373
Unknown description...
CVE-2026-95364
Unknown description...
CVE-2026-96279
GHSA-9rww-v4mm-x4jg...
CVE-2026-95283
Unknown description...
CVE-2026-95279
Unknown description...
CVE-2026-95361
Unknown description...
CVE-2026-95352
Unknown description...
CVE-2026-95334
Unknown description...
CVE-2026-96275
security update...
CVE-2026-95276
Unknown description...