Mistune is a Python Markdown parser whose math plugin, prior to version 3.2.1, improperly renders inline and block math expressions by directly concatenating raw user input into HTML output without escaping. This occurs even when escape mode is enabled, potentially allowing injection of malicious HTML or scripts. The vulnerability is fixed in version 3.2.1.
Multiple vulnerabilities have been identified in the Golang Go-Module affecting components such as Net, Image, and Crypto. These issues impact versions prior to 5.36.00.16. A fixed version 5.36.00.16 is available. The vulnerabilities are addressed in updated Red Hat Hardened Images RPMs for golang1.26. No evidence of exploitation in the wild has been reported.
Multiple security vulnerabilities have been identified in Keycloak, an open-source identity and access management solution enabling single sign-on for modern applications. These include denial of service, session fixation leading to account takeover, open redirect issues, information disclosure, unauthorized resource access, and token replay attacks. Red Hat has released fixed versions and updated container images addressing these issues. Users are advised to back up their installations and apply the updates promptly.
The npm package 'hello-world-pkg-value-value-p' contains malicious code that executes a reverse shell to a hardcoded attacker IP address upon installation. This allows unauthenticated remote code execution on the installer's machine. The package has no legitimate functionality and is solely designed to compromise systems that install it.
Multiple high-impact security vulnerabilities were identified and fixed in Mozilla Firefox and Firefox ESR. These include use-after-free and memory safety bugs in the DOM networking and WebRTC components. The flaws were present in Firefox ESR versions 115.35.1 and 140.10.1, and Firefox 150.0.1. The bugs showed evidence of memory corruption and could potentially be exploited to execute arbitrary code. Fixes are available in Firefox 150.0.2 and Firefox ESR 115.35.2 and 140.10.2.
OpenEXR, a library for the EXR image format used in motion pictures, contains a critical vulnerability in its readVariableLengthInteger() function. Versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11 improperly handle variable-length integer decoding from untrusted input, leading to undefined behavior due to an excessive left shift on a 64-bit value. This flaw has been fixed in versions 3.2.9, 3.3.11, and 3.4.11.
Mistune versions 3.0.0a1 through 3.2.0 contain a Regular Expression Denial of Service (ReDoS) vulnerability in the LINK_TITLE_RE regex used for parsing Markdown link titles. The vulnerability arises from overlapping regex alternatives that cause catastrophic backtracking when processing crafted Markdown inputs with repeated exclamation marks and no closing quote. This can lead to significant CPU consumption and application unresponsiveness during Markdown parsing.
The npm package 'internal-company-module-test-1337' versions 99.99.9992, 99.99.9994, 99.99.9995, and 99.99.9996 contains malicious code. It communicates with a domain linked to malicious activity and compromises any computer on which it is installed. Removal of the package does not guarantee full remediation as the system may already be fully compromised. Immediate rotation of all secrets and keys stored on the affected machine is strongly advised.
Hashcat version 7.1.2 contains a stack-based buffer overflow vulnerability in the functions mangle_to_hex_lower() and mangle_to_hex_upper() located in src/rp_cpu.c. This flaw arises from an improper bounds check that does not consider the doubling in size when password bytes are converted to hexadecimal. An attacker can exploit this by supplying a crafted rule file or using the -j or -k rule options with password candidates of 128 or more characters, potentially causing denial of service or arbitrary code execution.
A vulnerability in hickory-net's DNSSEC validation causes an unbounded loop during NSEC3 closest-encloser proof validation when the SOA record in a DNS response's authority section is not an ancestor of the queried name. This leads to memory exhaustion in release builds or a panic in debug builds. The issue affects versions prior to 0.26.1 and is triggered by certain NoData or NXDomain responses with mismatched SOA owners. Updating to version 0.26.1 resolves the issue.
A vulnerability in hickory-proto's BinEncoder causes CPU exhaustion during message encoding due to an O(n²) complexity in name compression. The encoder stores candidate labels in a vector and performs linear scans to find matches, which can be exploited by malicious messages with many records to cause denial-of-service (DoS) via CPU exhaustion. The issue is fixed in version 0.26.1.
Apache MINA versions 2.1.0 through 2.1.11 and 2.2.0 through 2.2.6 contain a vulnerability where the classname allowlist check is bypassed in AbstractIoBuffer.resolveClass(), allowing arbitrary code execution. This occurs because one code branch does not verify the class against the allowlist before calling Class.forName(). The issue is fixed in versions 2.1.12 and 2.2.7 by applying the classname allowlist earlier. Applications using Apache MINA that invoke IoBuffer.getObject() are affected and should upgrade to the fixed versions.
Multiple security vulnerabilities affecting Mozilla Firefox and Firefox ESR were fixed in versions Firefox 150.0.1 and Firefox ESR 140.10.1. These include memory safety bugs that could lead to arbitrary code execution, information disclosure due to incorrect boundary conditions in the Audio/Video component, and a sandbox escape vulnerability in the WebRTC networking component. The vulnerabilities were reported by various security researchers and the Mozilla Fuzzing Team. The fixes address critical and high impact issues present in earlier versions.
Multiple security vulnerabilities affecting Mozilla Firefox, Firefox ESR, and Thunderbird were fixed in versions Firefox 150, Firefox ESR 115.35, and Thunderbird 150. These include high-impact issues such as use-after-free, uninitialized memory, privilege escalation, information disclosure, and memory safety bugs. Some vulnerabilities showed evidence of memory corruption and could potentially allow arbitrary code execution. The issues span various components including DOM, WebRTC, Audio/Video codecs, Graphics, JavaScript engine, Networking, and NSS libraries. The fixes address both high and moderate impact vulnerabilities, with some low impact issues also resolved.
A vulnerability in the erb gem used by Ruby and Ruby on Rails allows arbitrary code execution via a deserialization bypass. This security flaw affects the ERB component, which is responsible for embedded Ruby templating. The issue has been rated as important by Red Hat and affects multiple Red Hat Enterprise Linux 9 variants. A security update addressing this vulnerability is available from Red Hat.
A Denial of Service (DoS) vulnerability in the Protobuf PHP library allows crafted messages with negative varints or deep recursion to crash applications during parsing, causing service disruption. This affects specific versions of the protobuf package. The vulnerability has a high severity score of 7.1 and requires user interaction to exploit.
CVE-2026-4786 is a vulnerability in Python 2.7 where the mitigation for a previous flaw (CVE-2026-4519) was incomplete. Specifically, if a URL contained "%action", certain browser types could bypass the mitigation, allowing command injection via the webbrowser.open() API into the underlying shell. This vulnerability affects multiple Python 2.7 versions and some Python 3 versions prior to fixed releases. A high-severity CVSS 3.1 score of 7.1 has been assigned. Official patches are available in updated Ubuntu package versions.
A use-after-free vulnerability exists in Python 2.7 and certain Python 3 versions in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile classes. This occurs when a MemoryError during decompression leads to reuse of the decompressor instance without proper cleanup. The vulnerability can cause crashes or potentially arbitrary code execution. It affects programs that reuse decompressor instances after a MemoryError; one-shot decompression functions are not affected. Fixed versions are available in Python 3.10.12, 3.12.3, and 3.14.4.
A critical vulnerability in Mesa before versions 25.3.6 and 26 before 26.0.1 allows out-of-bounds memory access in the WebGPU component due to improper validation of memory allocation sizes based on untrusted input. This flaw can lead to crashes or potentially arbitrary code execution. The issue affects multiple Ubuntu package versions and has been addressed in updated Mesa packages. Users should apply the available patches and restart their sessions to mitigate the risk.