2026

Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists

rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() co

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::deriv

@astrojs/node allows Astro to deploy your SSR site to Node targets. Prior to 10.0.5, requesting a static js/css resource

@astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets. Prior to 13.1.10, the fetch() call for re

Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall() function in src/poetry/utils/helpers.py:410-

Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in

Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain uninte

Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's ta

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a

Astro is a web framework. Prior to 6.1.6, the defineScriptVars function in Astro's server-side rendering pipeline uses a

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in

Math.js is an extensive math library for JavaScript and Node.js. From 13.1.1 to before 15.2.0, a vulnerability allowed e

BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administration module on net

A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to i

A Broken Access Control vulnerability exists in ClassroomIO v0.1.13 where an authenticated low-privileged "student" user

In Mahara before 24.04.10 and 25 before 25.04.1, an institution administrator or institution support administrator on a

bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL.

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00usb: fix devres lifetime USB drivers b

In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_report() struct

In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill ev

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_est

In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and output paths

In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency wit

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing le

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix use-after-free in timeout ob

In the Linux kernel, the following vulnerability has been resolved: xfrm: clear trailing padding in build_polexpire()

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_

In the Linux kernel, the following vulnerability has been resolved: tipc: fix bc_ackers underflow on duplicate GRP_ACK_

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dma_free_coherent() size dma_a

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: allocate rx skb before consuming bytes

In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject oversized global TT response buf

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error

In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by referen

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: fix refcount underflow in intel_engine

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock

In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in __mmap_region() commit

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc repeat_call_control if damo

In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: deallocate damon_call() failure leak

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix NULL-deref on disconnect Make sur

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on disconnect The

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix integer underflow in chain mode T

In the Linux kernel, the following vulnerability has been resolved: mm: filemap: fix nr_pages calculation overflow in f

In the Linux kernel, the following vulnerability has been resolved: idpf: fix PREEMPT_RT raw/bh spinlock nesting for as

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page_pool error handling in lan96

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page pool leak in error paths la

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix use-after-free and leak in lan966

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key parsing memleak In rxrpc_preparse_x

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion F