2026

In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_sct

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in tup

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst() bef

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the ne

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_read_

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_so

In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass t

In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops fo

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier reference

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed repl

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after par

In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSO

In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer bind

In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK ti

In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_stid

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrfs_r

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection with md_c

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_queu

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate fail

In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests without

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before d

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ACKALL packet handling rxrpc_input_acka

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential infinite loop in rxrpc_recvmsg

In the Linux kernel, the following vulnerability has been resolved: rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc

The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and includ

Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Con

Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured,

In the Linux kernel, the following vulnerability has been resolved: qede: sync udp_tunnel ports outside qede_lock in th

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer all

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI s

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock between metadata writeba

In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path w

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, w

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, r

SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFileP

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differe

The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some o

The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization

OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into

stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause deni

Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator

Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that

Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive des

Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks

Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string

Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expe