Threat database

A vulnerability in Next.js App Router applications allows middleware or proxy bypass via segment-prefetch routes. This issue is an incomplete fix of CVE-2026-44575, specifically affecting middleware.ts when used with Turbopack. The vulnerability can lead to information disclosure due to middleware bypass. It affects Next.js versions from 15.2.0 up to but not including 15.5.18, and from 16.0.0 up to but not including 16.2.6. A patch is available in versions 15.5.18 and 16.2.6.

A security update for the libtiff library addresses a vulnerability referenced as CVE-2026-4775. This update is functionally equivalent to the Red Hat advisory RHSA-2026:16055. No specific technical details or affected versions are provided in the available data.

Pillow versions from 4.2.0 up to but not including 12.2.0 contain a vulnerability where processing a maliciously crafted PDF can cause the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This denial of service issue has been addressed in version 12.2.0. The vulnerability affects multiple Ubuntu package versions and has a medium severity rating with a CVSS score of 5.5.

VM2 versions prior to 3.11.2 contain a sandbox escape vulnerability that allows attackers to execute arbitrary code on the host system by breaking the VM2 sandbox isolation. The flaw arises from improper handling of exceptions with null prototype objects, enabling attackers to access host functions and execute commands. This vulnerability is rated critical with a CVSS score of 9.8 and has been fixed in version 3.11.2.

VM2 versions prior to 3.11.2 contain a critical sandbox escape vulnerability via the neutralizeArraySpeciesBatch method. This flaw allows attackers to invoke host-side getters on array prototypes, exposing host objects including the host Function object, enabling arbitrary code execution on the host system. The vulnerability is fixed in version 3.11.2.

This entry concerns security updates addressing vulnerabilities identified as CVE-2026-43284 and CVE-2026-43500 in SUSE products. Public exploit code is available for CVE-2026-43284 via Metasploit and Exploit-DB, indicating the vulnerability is well-documented and potentially exploitable. No specific affected versions or detailed impact descriptions are provided. The severity is noted as high, but no CVSS score is available.

A vulnerability in the vm2 library's NodeVM with the option nesting: true allows sandboxed code to bypass require restrictions and load the vm2 module itself. This enables the creation of an inner NodeVM with unrestricted require capabilities, allowing execution of arbitrary OS commands on the host. The issue arises because nesting: true injects vm2 into the sandbox's builtins unconditionally, overriding require: false or any allowlist. This flaw affects all vm2 versions prior to 3.11.1.

A security update for libpng12 addresses two use-after-free vulnerabilities in functions png_set_tRNS, png_set_PLTE, and png_set_hIST. These flaws can lead to arbitrary code execution or heap information disclosure. The update advances libpng12 to version 1.2.59 to fix these issues.

Multiple security issues were fixed in the postfix-3.11.2-1.1 package on the GA media of openSUSE Tumbleweed. The details of these issues are not specified in the provided data.

A security update for libsoup has been released by the SUSE Product Security Team. This update provides a functional equivalent of the Red Hat advisory RHSA-2026:14087. No specific technical details or affected versions are provided in the available information.

Multiple security issues were addressed in the gnutls-3.8.13-1.1 package on the GA media of openSUSE Tumbleweed. These fixes resolve vulnerabilities identified by several CVEs. No specific details about the nature of the vulnerabilities or their impact are provided.

This vulnerability concerns a regression issue in python-urllib3 addressed by the update for CVE-2025-66471. The update fixes a regression introduced in the previous patch. No detailed technical or impact information is provided beyond this fix.

A security update for giflib addresses CVE-2026-23868, which involves a double-free vulnerability caused by a shallow copy operation that can lead to memory corruption.