Search CVE reports


Toggle filters

111 – 120 of 82286 results


CVE-2026-105830

Medium priority
Needs evaluation

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can...

1 affected package

php-league-commonmark

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php-league-commonmark Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
Show less packages

CVE-2026-105829

Medium priority
Needs evaluation

League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. Attackers...

1 affected package

php-league-commonmark

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php-league-commonmark Needs evaluation Needs evaluation Needs evaluation Needs evaluation —
Show less packages

CVE-2026-104635

Medium priority
Needs evaluation

Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested JSON document. Any application that decodes...

1 affected package

protobuf

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
protobuf Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-51786

Medium priority

Not in release

(An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x ...)

1 affected package

lustre

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
lustre Not in release Not in release Not in release — —
Show less packages

CVE-2026-55467

Medium priority
Needs evaluation

2 affected packages

libcupsfilters, cups-filters

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libcupsfilters Needs evaluation Needs evaluation Not in release Not in release Not in release
cups-filters Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-108577

Medium priority
Needs evaluation

A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes...

1 affected package

libmodplug

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libmodplug Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2026-108553

High priority
Needs evaluation

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a...

1 affected package

openrefine

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openrefine Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2026-108063

Low priority
Needs evaluation

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that...

1 affected package

libhangul

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libhangul Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2026-107794

Medium priority
Needs evaluation

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with...

1 affected package

libextutils-typemaps-default-perl

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libextutils-typemaps-default-perl Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
Show less packages

CVE-2026-107570

Medium priority
Needs evaluation

heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

1 affected package

mutt

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mutt Needs evaluation Needs evaluation Needs evaluation Not in release Needs evaluation
Show less packages