2026

An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted Java

Mini-XML 4.0.5 contains a memory leak vulnerability in mxml_load_data() during malformed XML parsing. Specially crafted

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file conta

libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data c

hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate pars

QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().

Bento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration atom parsers. A specially

Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and AP4_HvccAtom::Create(). A speci

libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265_push_NAL()

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4)

NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasteriz

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI revie

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0

Snipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/{object_t

Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with

Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a user with the customfields.create permission can st

`@bsv/wallet-toolbox` provides BRC-100 wallet signing and storage components, while `@bsv/wallet-toolbox-client` and `@b

phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6 builds a SQL `IN

phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injecti

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp vali

A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the

A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/contro

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cirrus

MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell wh

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who

Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embe

Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integrat

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the patch.readRepoDirectories tRPC proc

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix device_register() error path When

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length chec

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes ag

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet_kill in cvm_oc

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napi_disable in cvm_oc

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Validate udata before executing comma

In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action r

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/start with no update I

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range rx MCS instead of le

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPF_ADDR_PER

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4_ext_migr

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to pr

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbs_f

In the Linux kernel, the following vulnerability has been resolved: arm64: RSI: fix field-spanning write warning in att