Month: June 2026

Updated an acknowledgement. This is an informational change only. Continue reading CVE-2026-35429 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability→

Information published. Continue reading CVE-2026-7774 tarfile.data_filter path traversal bypass allows writing outside the extraction directory→

Information published. Continue reading CVE-2026-3276 Potential DoS via quadratic complexity in unicodedata.normalize()→

Information published. Continue reading CVE-2026-8643 pip can extract console_scripts and gui_scripts outside installation directory→

Information published. Continue reading CVE-2026-8829 HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities→

Information published. Continue reading CVE-2026-43958 Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service→

Information published. Continue reading CVE-2026-5419 Guntls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal→

Information published. Continue reading CVE-2026-27145 Inefficient candidate hostname parsing in crypto/x509→