IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a vulnerability that allows a remote authenticated attacker to cause a denial of service by exploiting improper neutralization of special elements in OS commands. This flaw does not impact confidentiality or integrity but affects availability.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary code. This is due to improper neutralization of special elements used in operating system commands, leading to command injection. The vulnerability has a high severity with a CVSS score of 8.8.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a critical vulnerability that allows remote attackers to execute arbitrary code. This is due to improper neutralization of special elements used in operating system commands, classified under CWE-94. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
Share to Clipboard version 1.14.1 (versionCode 32) contains insecure permissions that allow unauthorized attackers to overwrite another user's clipboard content arbitrarily.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a server-side request forgery (SSRF) vulnerability that allows a remote authenticated attacker to obtain sensitive information. The vulnerability requires authentication and does not impact integrity or availability. The CVSS score is 4.3, indicating a medium severity risk.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a vulnerability that allows an authenticated attacker to create a server-generated ZIP archive with entry paths that traverse outside the intended extraction directory. If a victim extracts this archive using a tool that does not sanitize paths, it could lead to arbitrary file writes on the victim's system.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a vulnerability that allows remote attackers who can access the message broker to execute arbitrary code via deserialization of untrusted data. This flaw is identified as CWE-502 and has a high severity score of 8.1. The vulnerability requires network access with high attack complexity and no privileges or user interaction. No public exploits or patches are currently documented.
IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary code via deserialization of untrusted data. This flaw is identified as CWE-502 and has a high severity with a CVSS score of 8.8. The vulnerability requires authentication but no user interaction and impacts confidentiality, integrity, and availability.
CVE-2026-8824 is a high-severity memory corruption vulnerability in vtk version 9.6.1. It affects the vtkBMPReader component's ExecuteDataWithInformation function, where processing a specially crafted BMP file can cause a buffer overflow. This vulnerability could lead to denial of service due to application crash or instability.
HashiCorp Nomad and Nomad Enterprise contain a vulnerability (CVE-2026-107347) involving improper symlink resolution during dispatch payload and executor log writes. This flaw allows a malicious workload to modify files outside its allocation directory. If the Nomad client agent runs with root privileges, exploitation could lead to root code execution on the host. The issue is fixed in Nomad versions 2.1.0, 1.11.12, and 1.10.18.
Seven months after initial disclosure, the Coruna iOS exploit framework continues to evolve, now deploying two distinct chains based on device operating system version. Targets running iOS 17.2.1 or earlier receive the legacy Coruna framework, while later builds receive DarkSword-derived chains. Analysis identified 608 domains delivering Coruna-family code, with 93 sites mapping to 21 distinct tracking collectors. Distribution spans dating portals, AI-companion platforms, cryptocurrency promotions, media streaming services, and compromised legitimate sites. The attack requires no user interaction beyond loading a webpage, operating through hidden iframes that deploy browser exploits leading to native code execution. Recovered modules include kernel memory manipulation, code-signing enforcement changes, process memory access, encrypted command-and-control communication, and cleanup routines. One delivery vector involves compromised npm packages, enabling legitimate websites to serve exploits through their o...
CVE-2026-111497 is a critical out-of-bounds write vulnerability in Google's Brotli decompression library that allows specially crafted compressed data to corrupt application memory and potentially enable remote code execution. It affects Brotli versions 1.0.3 through 1.2.0 and multiple platforms including Node.js, Bun, Python, and .NET frameworks. Exploitation attempts were observed shortly after patches were released, with proof-of-concept code demonstrating remote code execution via malicious HTTP requests and responses. The vulnerability can be triggered through various vectors such as HTTP requests with Brotli-compressed bodies, malicious server responses, and file processing workflows. Enterprise products from Palo Alto Networks and VMware are also impacted, broadening the attack surface. CISA added this vulnerability to its KEV catalog on October 27, 2026.
Botan versions from 1.11.34 up to but not including 3.13.0 have a vulnerability in the botan ocsp_check command-line tool where OCSP responses are accepted without verifying the signature or authorizing the signer. This allows a malicious or on-path attacker to provide a forged OCSP response indicating a revoked certificate is valid. The issue is fixed in version 3.13.0.
CVE-2026-118764 is a high-severity vulnerability in the isaacs minimatch library prior to version 11.0.1. It involves asymmetric resource consumption due to repeated expansion of malicious glob patterns, leading to excessive CPU and memory usage during pattern compilation. The issue is fixed in version 11.0.1.
The decode-uri-component package has a denial of service vulnerability due to quadratic time complexity when processing malformed inputs with many distinct percent-encoded runs. An attacker can craft a payload of about 224 KB that causes the Node.js event loop to block for approximately 20 seconds, making the application unresponsive. This affects version 0.5.0 and earlier. The issue arises because the fallback decoding function performs multiple regex replacements proportional to the number of distinct encoded runs, leading to O(K·L) complexity. The vulnerability impacts availability only, with no confidentiality or integrity effects. It is fixed in version 0.5.1.
A denial of service vulnerability exists in the zip crate versions 5.1.0 up to but not including 9.0.0 when the legacy-zip feature is enabled. An attacker can craft a malicious ZIP64 archive with an uncompressed size set to an extremely large value, causing a capacity overflow panic in the Shrink decoder during extraction. This panic terminates the affected process, leading to denial of service. The issue arises because the decoder reserves output buffer capacity based on the uncompressed size from ZIP metadata before validating the compressed data size. This vulnerability is fixed in version 9.0.0.
cert-manager versions prior to 1.19.6 and 1.20.3 allow namespace users with permission to create ACME Challenge resources to bypass Issuer and ClusterIssuer DNS01 solver policies. This occurs because the controller accepts attacker-controlled DNS provider configurations from Challenge.spec.solver without validating ownership or solver restrictions. This can lead to unauthorized use of DNS credentials or credential disclosure, particularly with acme-dns providers.
Crass versions prior to 1.0.7 have a vulnerability where parsing input containing non-ASCII characters leads to superlinear CPU consumption due to inefficient tracking of multi-byte character positions. This can be exploited by an attacker to cause excessive CPU usage and potential denial of service. The issue is fixed in version 1.0.7.
Crass versions prior to 1.0.7 contain a vulnerability where processing a stylesheet with a large number of adjacent CSS comments causes excessive recursion, leading to a SystemStackError. This occurs when the default behavior of discarding comments is used (i.e., :preserve_comments option is false). The issue is fixed in version 1.0.7, which eliminates recursion when discarding comments. As a workaround, enabling the :preserve_comments option prevents the recursion and the error.
Crass versions prior to 1.0.7 contain a vulnerability where deeply nested CSS blocks and functions can cause unbounded recursion, leading to a SystemStackError or excessive memory consumption. This issue arises because Crass lacks a depth guard when parsing CSS simple blocks and functions. The vulnerability is fixed in version 1.0.7 by introducing a configurable depth limit with a conservative default.