CVE-2025-4318 is a code injection vulnerability in the Amazon @aws-amplify/codegen-ui-react package. The fix for this vulnerability was incomplete, indicating that the issue may still pose a risk. No specific affected versions or detailed technical information are provided.
CVE-2026-111823 is a critical vulnerability in Mage OSS mage-ai versions up to 0.9.80. The issue involves the software proceeding with session creation even when encountering an unknown OAuth provider, which is a detection of an error condition without appropriate action (CWE-390). This flaw can lead to complete compromise of confidentiality, integrity, and availability of the affected system.
CVE-2026-89096 is a vulnerability in the nfs-utils package on Red Hat Enterprise Linux 10 where the rpc.statd service fails to release memory properly after processing state notification callbacks. An unauthenticated remote attacker can exploit this by sending repeated state notification requests, causing a memory leak that leads to Denial of Service (DoS) through resource exhaustion. Exploitation requires direct network access to rpc.statd, an existing monitored host entry, and continuous requests. Default configurations using NFSv4 and firewall rules reduce exposure. The vulnerability is rated medium severity with a CVSS score of 5.9.
CVE-2026-89088 is a heap-based buffer overflow vulnerability in libparted's file system resizing logic for FAT16 volumes on Red Hat Enterprise Linux 10. It can cause memory corruption leading to application crashes and denial of service when resizing a specially crafted FAT16 file system image with malformed directory metadata. Exploitation requires local user interaction during an administrative partition resizing operation. The vulnerability does not allow remote code execution or privilege escalation under default configurations.
The OSSTMM 4 pre-release was announced and streamed live at the ICIST Conference in Lithuania, with a public release planned for December 1, 2026. OSSTMM (Open Source Security Testing Methodology Manual) is a framework for security testing and analysis. This announcement is informational and does not describe a specific security vulnerability or threat.
Text::CSV_XS versions before 1.65 for Perl improperly handle input lines ending with a separator followed by a lone carriage return (CR). This causes the parser to insert a 0xFF byte, representing an end-of-file marker, into the last field, which was not present in the original input. When UTF-8 flagging is enabled, this results in malformed UTF-8 data. This behavior can lead to incorrect parsing results and potential data integrity issues.
CVE-2026-110758 is a buffer under-read vulnerability in Text::CSV_XS for Perl versions before 1.65. The flaw occurs when processing all-blank fields under the allow_whitespace option in the strip_trail_whitespace function, which may read memory before the start of the field's buffer. This can lead to unintended memory reads if certain conditions are met, such as the presence of spaces or tabs before the field buffer. The vulnerability has a high severity with a CVSS score of 7.5.
Text::CSV_XS versions before 1.65 for Perl contain a vulnerability where numeric fields with leading or trailing whitespace are not properly quoted when combined and printed. This improper encoding allows a numeric field containing newline characters to prematurely end a CSV record, causing subsequent fields to be interpreted as a new row.
Text::CSV_XS versions before 1.65 for Perl have a vulnerability where the end of a record and its line ending are dropped when a UTF-8 flagged field precedes invalid UTF-8 bytes during print operations. This causes the final bytes, closing quote, and line ending to be lost, resulting in subsequent records being concatenated onto the same line or misinterpreted as part of the previous field.
Text::CSV_XS versions before 1.65 for Perl have an inefficient algorithmic complexity vulnerability (CWE-407) that causes quadratic CPU usage when processing CSV input with carriage return (CR)-only line endings. This occurs because the getline function copies the entire unparsed remainder of the input after each record, leading to CPU time growing quadratically with input size. This can cause significant performance degradation when parsing large CSV files with classic Mac line endings.
Text::CSV_XS versions before 1.65 for Perl contain a memory leak vulnerability where parsed fields of a malformed CSV record are not freed after a failed parse attempt in the getline method. This causes memory exhaustion in long-running processes that repeatedly parse malformed CSV input.
CVE-2026-110753 is a critical use-after-free vulnerability in Text::CSV_XS for Perl affecting versions from 1.46 up to but not including 1.65. The flaw occurs when the skip_empty_rows option causes the parser to free a scalar variable that is still referenced by the application, leading to use of freed memory and potential process crashes.
Text::CSV_XS versions before 1.65 for Perl contain a vulnerability where memory exhaustion can occur due to allocation of one entry per index of an RFC 7111 selector in the fragment parameter. This happens because the fragment expands selectors into large arrays without limiting the size, allowing an attacker to cause an out-of-memory error that terminates the process.
CVE-2026-111802 is a vulnerability in Nautilus on Red Hat Enterprise Linux 10 where the application improperly handles symbolic links when prompting users to empty the trash after unmounting removable drives or disk images. An attacker can exploit this by tricking a user into mounting a crafted storage volume and confirming the trash emptying prompt, causing arbitrary deletion of files accessible to that user. Exploitation requires local user interaction within a graphical desktop session and does not lead to privilege escalation or code execution.
CVE-2026-17591 is a use-after-free vulnerability in libarchive affecting Red Hat Hardened Images. The flaw occurs in the archive_entry_copy_mac_metadata() function, where an internal buffer is deallocated before completing a data copy. This can lead to a Denial of Service (application crash) or potential information disclosure by reading uninitialized memory. Exploitation requires highly specific application-level API usage that is uncommon in standard archive utilities. Red Hat rates this vulnerability as low severity due to its limited exposure and impact in typical environments. A security update addressing this issue is available for Red Hat Hardened Images.
CVE-2026-111044 is an incorrect authorization vulnerability in LizardByte Sunshine, a self-hosted game stream host for Moonlight. Between versions 2026.329.165800 and 2026.906.222525, Sunshine accepted any client certificate chaining to a stored paired-client certificate without requiring the exact paired identity. This allowed a previously paired client to bypass the Disable control by presenting an alternate certificate derived from its paired certificate. The issue also involved inconsistent client identity handling due to non-canonicalized PEM encoding comparisons. The vulnerability does not affect clients that were never paired, and removing a paired client removes its trust relationship. The issue is fixed in version 2026.906.222525.
CVE-2026-62438 is an integer overflow vulnerability in GIMP's handling of Bohemia Interactive (PAA) texture files on Red Hat Enterprise Linux 10. It can cause a denial of service by crashing the plug-in process or potentially disclose limited memory contents. Exploitation requires a local user to open or preview a specially crafted PAA file. The impact is limited due to the optional nature of GIMP on RHEL servers and the uncommon image format involved.
CVE-2026-62439 is an integer overflow vulnerability in the GIMP file-pvr plug-in used in Red Hat Enterprise Linux 10. The flaw occurs when calculating memory buffer sizes for image dimensions in PowerVR (.pvr) files, leading to a heap-based buffer overflow. Exploitation requires a user to open or preview a specially crafted .pvr file, potentially causing arbitrary code execution or application crash (Denial of Service).
Apache Kylin versions from 4 up to 5.0.4 contain a vulnerability allowing unauthorized cross-project job manipulation. This issue primarily affects Kylin services exposed directly to public networks, which is uncommon. Most in-house deployments are not impacted. The vulnerability is fixed in version 5.0.5.
ZoneMinder versions prior to 1.38.3 contain a command injection vulnerability in the downloadEvents() function. This occurs because the monitor Name value is manually wrapped in single quotes instead of using a proper escaping function before being used in shell commands. An attacker with monitor-create or monitor-edit permissions can store a monitor Name containing shell metacharacters, which can then be exploited by a user with Events View permission exporting events. This allows arbitrary command execution as the web server user. The issue is fixed in version 1.38.3.