A vulnerability in Golang 1.10 and certain related versions causes improper context tracking across template branches for JavaScript template literals. This leads to incorrect escaping of content within these templates, potentially resulting in cross-site scripting (XSS) vulnerabilities. The issue arises from incorrect tracking of brace depth within template actions inside JS template literals.
A vulnerability in Golang 1.10's tar.Reader allows unbounded memory allocation when processing a maliciously crafted archive with many sparse regions in the old GNU sparse map format. This can lead to denial of service due to resource exhaustion.
A vulnerability in Golang 1.10 affects TLS 1.3 connections where multiple key update messages sent in a single record post-handshake can cause the connection to deadlock. This deadlock leads to uncontrolled resource consumption, resulting in a denial of service condition.
A vulnerability in Golang 1.10 on Linux allows the Chmod operation to follow a symlink if the target is replaced with one during the operation. This occurs because the Linux fchmodat syscall ignores the AT_SYMLINK_NOFOLLOW flag, which is intended to prevent symlink traversal. The Root.Chmod function checks for symlinks before acting, but if the target is swapped with a symlink after the check and before the operation, Chmod may modify files outside the intended root directory.
A vulnerability in Golang 1.20 involves the compiler's handling of pointer operands during memory move operations. A no-op interface conversion prevented the compiler from correctly determining non-overlapping memory moves, which could lead to memory corruption at runtime. This issue affects specific Golang 1.21 and 1.22 versions as listed. The vulnerability has a high severity rating with a CVSS score of 7.1.
Multiple vulnerabilities have been identified in the Go programming language affecting versions prior to 1.26.2. These issues have been addressed in version 1.26.2, which contains the necessary fixes. The vulnerabilities were reported by the German Federal Office for Information Security (BSI). No specific technical details or impact descriptions are provided in the available data. No known exploits in the wild have been reported.
Multiple memory safety vulnerabilities affecting Mozilla Firefox and Thunderbird, including ESR versions, were identified and fixed in versions Firefox 149.0.2, Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird 149.0.2, Thunderbird ESR 140.9.1. These bugs showed evidence of memory corruption and could potentially be exploited to execute arbitrary code. Additional issues include integer overflow and boundary condition errors in graphics components fixed in Firefox 149.0.2. The vulnerabilities have been addressed in official Mozilla releases.
Cockpit's remote login feature allows user-supplied hostnames and usernames from the web interface to be passed to the SSH client without proper validation or sanitization. This flaw enables an attacker with network access to the Cockpit web service to inject malicious SSH options or shell commands via a crafted HTTP request to the login endpoint, resulting in unauthenticated remote code execution on the Cockpit host. The vulnerability exists in Cockpit versions starting from 327 and affects default configurations with remote host login enabled. The attack requires network access to the Cockpit service (default port 9090) and depends on the OpenSSH version and SSH configuration. Systems running OpenSSH 9.6 or later are not vulnerable to the hostname injection path, and systems not using the %r token in SSH Match exec directives are not vulnerable to the username injection path. This vulnerability has a CVSS score of 9.8 (critical) and public exploit code is available.
An integer overflow vulnerability in the deflate_dng_load_raw function of LibRaw can be triggered by a specially crafted malicious file, leading to a heap buffer overflow. This vulnerability allows an attacker to cause a denial of service or potentially execute arbitrary code. Multiple affected versions exist, and fixes have been released in updated package versions for Ubuntu LTS releases.
A critical buffer overflow vulnerability exists in Mbed TLS through version 3.6.5 and TF-PSA-Crypto 1.0.0. The flaw occurs during the export of public keys for Finite Field Diffie-Hellman (FFDH) keys. This vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability if exploited.
Multiple vulnerabilities have been identified in Red Hat Ansible Automation Platform 2.5. Red Hat has released an important security advisory (RHSA-2026:6308) addressing these issues with an update. The platform is an enterprise automation framework used for system configuration, software deployment, and workflow orchestration. Users are advised to apply the update after ensuring all previous errata are installed.
Multiple high-impact security vulnerabilities affecting Mozilla Firefox and Thunderbird have been fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, and Thunderbird ESR 140.9. These include memory safety bugs, use-after-free, sandbox escapes, race conditions, incorrect boundary conditions, integer overflows, privilege escalations, and denial-of-service issues. Some of these bugs showed evidence of memory corruption and could potentially be exploited to execute arbitrary code. The vulnerabilities span various components such as Graphics (WebRender, Canvas2D), Telemetry, CSS Parsing, JavaScript Engine, Audio/Video playback and codecs, Networking, IPC, WebRTC, and others. The fixes address both Firefox and Thunderbird versions prior to the fixed releases.
A signed integer overflow vulnerability in the libtiff library's putcontig8bitYCbCr44tile function allows a remote attacker to cause an out-of-bounds heap write by providing a specially crafted TIFF file. This can lead to denial of service (application crash) or arbitrary code execution. The flaw affects multiple versions of the GDAL package that use libtiff. Mitigation includes avoiding processing untrusted TIFF files or running affected applications in sandboxed environments.
CVE-2026-4738 is a critical vulnerability in OSGeo gdal affecting versions before 3.11.0. It involves improper restriction of operations within the bounds of a memory buffer in the frmts/zlib/contrib/infback9 modules, specifically related to the inftree9.C program files. The vulnerability has a high CVSS 4.0 score of 9.4, indicating severe potential impact. No known exploits in the wild have been reported. The affected versions include multiple Ubuntu package builds of gdal from 1.9.0 through 1.11.3+dfsg-3build1. No patch or remediation details are provided in the input data.
CVE-2026-4428 is a logic error in the CRL distribution point matching of AWS-LC that allows revoked certificates to bypass revocation checks during validation when CRL checking is enabled and partitioned CRLs with Issuing Distribution Point extensions are used. Applications using aws-lc-sys versions from 0.15.0 up to but not including 0.39.0 are affected. AWS customers using AWS services do not need to take action. The issue is fixed in aws-lc-sys version 0.39.0.
A logic error in the AWS-LC library's Common Name (CN) validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. This occurs because the function responsible for CN validation does not recognize these CN patterns as valid DNS identifiers, causing the name constraints check to be skipped. However, hostname verification still accepts these CN values when no dNSName Subject Alternative Name (SAN) is present, enabling bypass of name constraints. Applications using aws-lc-sys versions from 0.32.0 up to but not including 0.39.0 are affected. Customers of AWS services do not need to take action. The issue is fixed in version 0.39.0.
Cockpit CMS versions 2.13.4 and earlier with API access enabled are vulnerable to a SQL Injection flaw in the MongoLite Aggregation Optimizer. Attackers with a valid read-only API key can exploit this vulnerability via the /api/content/aggregate/{model} endpoint to inject arbitrary SQL through unsanitized field names. This allows bypassing content publication filters and unauthorized extraction of data from the SQLite content database. The vulnerability is fixed in version 2.13.5 by applying field-name sanitization to the affected method.
A denial of service vulnerability exists in Ruby versions prior to 6.1.0. This flaw allows an attacker to cause a denial of service condition. The issue affects Debian distributions using vulnerable Ruby versions. A fix has been released in Ruby 6.1.0.
CVE-2026-3338 is a high-severity vulnerability in the aws-lc-sys library, specifically in the PKCS7_verify() function of AWS-LC. It allows an unauthenticated attacker to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. This flaw affects aws-lc-sys versions from 0.24.0 up to, but not including, 0.38.0. There is no workaround; users should upgrade to version 0.38.0 or later. Customers of AWS cloud services are not impacted and do not need to take action.