pypdf versions prior to 6.21.3 are vulnerable to uncontrolled resource consumption when opening crafted PDF files with cross-reference streams declaring very large entry counts. This can lead to excessive memory usage due to multiplication of parsed entries via highly compressible streams, /Prev chains, and negative /Index counts. The issue is fixed in version 6.21.3.
A vulnerability in pypdf versions prior to 6.21.3 allows an attacker to cause excessive resource consumption by exploiting the page count retrieval logic. The issue arises because the library trusts an attacker-controlled /Count value in the page tree of an encrypted PDF, leading to excessive time and memory use. This flaw is fixed in version 6.21.3.
A vulnerability in pypdf versions prior to 6.21.3 allows uncontrolled resource consumption due to excessive memory use when strict mode processes a crafted invalid PDF dictionary. Nested parsing failures cause repeated exception text to accumulate in error messages, amplifying a small malformed dictionary into very large error outputs. This issue is fixed in version 6.21.3.
A resource consumption vulnerability exists in pypdf versions prior to 6.21.3 where retrieving page labels from a crafted PDF with many label ranges can cause excessive processing time. This is due to inefficient repeated scanning of the same data structure for each page. The issue is fixed in version 6.21.3.
A security vulnerability (CVE-2026-8177) has been identified in the perl-XML-LibXML module, which provides a Perl interface to the GNOME libxml2 library for XML parsing and manipulation. The flaw allows a denial of service (DoS) attack via truncated UTF-8 sequences in XML node names. Red Hat has issued an important security update to address this issue in Red Hat Enterprise Linux 8.8 variants.
pypdf versions prior to 6.21.4 contain a vulnerability where cloning or duplicating a crafted cyclic DictionaryObject can cause an infinite loop. This occurs because the clone traversal checks generated destination references instead of the original source references, allowing some source cycles to bypass the visited-object check. The issue is resolved in version 6.21.4.
Bricks Theme for WordPress versions before 2.4.1 contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint. This flaw allows anonymous attackers to read draft and unpublished page content by manipulating the popupId parameter without any status or capability checks. Attackers can use a public nonce to enumerate unpublished posts and disclose confidential content.
A high-severity uncontrolled resource consumption vulnerability (CWE-400) exists in pypdf versions prior to 6.21.4. The issue arises when parsing a crafted PDF page tree with many shared resources, causing excessive memory usage due to lack of a document-wide entry budget during page-tree flattening. This flaw was fixed in version 6.21.4.
pypdf versions prior to 6.21.4 contain a vulnerability where opening a crafted incomplete PDF with a cross-reference table that reaches the end of the file without a trailer can cause an infinite loop. This occurs because the trailer search repeatedly rewinds to the same stream position without making progress, blocking the processing thread. The issue is fixed in version 6.21.4.
@hapi/content versions from 3.0.6 up to but not including 6.0.3 contain a vulnerability in the Content.disposition() function where an inefficient regular expression causes excessive processing time. This can lead to blocking of the Node.js event loop when parsing multipart/form-data headers, affecting unauthenticated routes with payload.multipart enabled and any application passing untrusted headers to this function. The issue is resolved in version 6.0.3.
A vulnerability in Nuxt versions 4.6.0 through 4.6.2 allows an attacker with direct HTTP access to a development server to retrieve a generated appSecret file. This secret can be used to derive session passwords and forge session cookies, potentially compromising session integrity. The issue is limited to development servers bound to localhost and does not affect production builds or servers with explicitly configured secrets. The vulnerability is fixed in version 4.6.3.
A path resolution vulnerability exists in Nuxt's nitro-server versions 4.6.0 through 4.6.2 where literal or percent-encoded dot segments are resolved after routing and security checks. This allows requests like /%2e/admin to bypass route-based security controls and render protected pages. The issue is fixed in version 4.6.3.
Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expose the Nitro 2 development bundle at <buildDir>/dev/index.mjs through Vite file serving when the server is reachable over HTTP. Nitro inlines private runtimeConfig values resolved at build time into that bundle, including secrets configured in nuxt.config, and Nuxt 4.6.0 and later also inline the generated development appSecret. The default localhost binding limits remote exposure, production builds and Nitro 3 are not affected, and runtime configuration supplied only through NUXT_* environment variables at server startup is not inlined. This issue is fixed in version 4.6.3.
A vulnerability in Nuxt versions 4.6.0 through 4.6.2 allows an attacker with TCP access to a Nuxt development server to cause the server to read arbitrary files. This occurs because the server processes a client error event containing an absolute file path and returns the file contents in error reports, bypassing Vite's server.fs allow list. The issue is limited by default to localhost binding, does not affect production builds or Nuxt 3, and requires no browser interaction. The vulnerability is fixed in version 4.6.3.
Multiple security vulnerabilities have been identified and addressed in the Apache HTTP Server (httpd) packages provided by Red Hat. These include heap-based buffer over-reads, off-by-one out-of-bounds reads, NULL pointer dereferences, arbitrary code execution via heap-based buffer overflow, use-after-free leading to code execution or denial of service, buffer over-reads via outbound OCSP requests, denial of service via attacker-controlled FTP servers, and buffer overflow allowing security bypass. The update fixes an incomplete prior fix for CVE-2023-38709 and several new issues in various modules such as mod_proxy_ajp, mod_ldap, mod_xml2enc, and mod_proxy_html. The advisory applies to Red Hat Enterprise Linux Server Extended Life Cycle Support 7 and related architectures.
A security vulnerability in GNU Aspell allows arbitrary code execution via a crafted dictionary file. This flaw affects Red Hat Enterprise Linux 8 and related products. Red Hat has issued an important security update to address this issue. The vulnerability is identified as CVE-2026-103658 and is rated with high severity by the source. The update fixes the flaw by patching the aspell package. Users of affected Red Hat products should apply the update to mitigate the risk.
Red Hat has released a security advisory for a kernel live patch module targeting kernel version 5.14.0-284.134.1.el9_2. The update addresses multiple vulnerabilities in the Linux kernel components including netfilter, pppoe, bridge, packet, and xfrm subsystems. These vulnerabilities involve issues such as improper memory writes, pointer reload errors, and validation flaws. The advisory rates the security impact as Important and provides patches for Red Hat Enterprise Linux 9.2 variants.
Multiple security vulnerabilities have been identified and fixed in the dnsmasq packages used in Red Hat Enterprise Linux 10.0 Extended Update Support. These include heap buffer overflows, infinite loops, out-of-bounds reads, and source validation bypasses affecting DNS and DHCP functionalities. The update also includes a new DNSSEC trust anchor key for 2024.
Red Hat Ansible Automation Platform 2.6 includes fixes for multiple denial of service vulnerabilities in the receptor component related to HTTP/2 SETTINGS frames, crafted HTTP Range headers, and multiple ECH outer extension references. These issues could allow an attacker to cause service disruption by sending specially crafted network traffic.