Month: March 2026

Information published. Continue reading CVE-2026-33542 Incus does not verify combined fingerprint when downloading images from simplestreams servers→

Information published. Continue reading CVE-2026-33891 Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input→

Information published. Continue reading CVE-2026-33896 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)→

Information published. Continue reading CVE-2026-33895 Forge has signature forgery in Ed25519 due to missing S > L check→

Information published. Continue reading CVE-2026-33750 brace-expansion: Zero-step sequence causes process hang and memory exhaustion→

Information published. Continue reading CVE-2026-34353→

Information published. Continue reading CVE-2026-21712→

Information published. Continue reading CVE-2026-0964 Libssh: improper sanitation of paths received from scp servers→