Month: February 2026

Information published. Continue reading CVE-2024-32650 Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input→

Information published. Continue reading CVE-2022-30790 Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.→

Information published. Continue reading CVE-2025-37998 openvswitch: Fix unsafe attribute parsing in output_userspace()→

Information published. Continue reading CVE-2025-38244 smb: client: fix potential deadlock when reconnecting channels→

Information published. Continue reading CVE-2023-28155 The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.→

Information published. Continue reading CVE-2025-22079 ocfs2: validate l_tree_depth to avoid out-of-bounds access→

Information published. Continue reading CVE-2024-29180 webpack-dev-middleware Path Traversal vulnerability→

Information published. Continue reading CVE-2024-49957 ocfs2: fix null-ptr-deref when journal load failed.→