2026

shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, whic

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the serve

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate

The InPost PL WordPress plugin before 1.9.1 does not verify that the request originates from the legitimate buyer before

The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null folio->mapping deref du

In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_remo

In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP co

In the Linux kernel, the following vulnerability has been resolved: udp: clear skb->dev before running a sockmap verdic

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: use kmap_local_page in netvsc_copy_to_se

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_T

In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list()

In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4_create

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.

Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions.

Unauthenticated Broken Access Control in Motors <= 1.4.109 versions.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jacob N. Breetvelt

Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions.

Unauthenticated Sensitive Data Exposure in Vitepos <= 3.4.2 versions.

Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions.

Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby nat

List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function. pairwise() coll

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitiv

CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the devi

Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming packets by sending a small num

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image

X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarbal

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, the generic peer-suffix normalizer also stripped parenthesized t

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can install configDependencies declared in pnpm-workspace.y

wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains no signer. Such an ob

AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences

wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during t

The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final modular reduction, so

X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects on

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 si

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensit

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensit

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image cont

Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding th

Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain validation. A raw pub

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensit

An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of S

A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to cause a De