CVE-2026-110856 high GitPython: GitPython: Denial of Service via regular expression backtracking in date parsing since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110854 high Parse Server before 8.6.97 and 9.10.2 Denial of Service via Unhandled Email Error since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110839 high freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110838 high freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110837 high freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110833 high freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110830 high freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-55787 high flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-55786 high flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module` since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-53999 high Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs) since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86848 high dpdk: dpdk: Time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86567 high dpdk: dpdk: VDUSE handler fails to invalidate vring pointers when IOTLB is invalidated, leading to use-after-unmap since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-109527 high mcp: mcp: Denial of Service via unbounded HTTP request body buffering since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-107350 high pgbouncer: pgbouncer: Privilege escalation via secondary startup message during SCRAM authentication since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-107349 high pgbouncer: pgbouncer: Denial of Service via empty parameter name in startup options since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-100413 high SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86565 high dpdk: dpdk: Guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86563 high dpdk: dpdk: Double offset bug in vhost log mapping calculation since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86562 high dpdk: dpdk: Control-queue descriptor double-fetch overflows host heap in DPDK vhost (VDUSE) since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-77524 high github.com/kedacore/keda: KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-59951 high mcp: mcp: Denial of Service via session memory exhaustion in streamable HTTP servers since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-100236 high dpdk: dpdk: heap out-of-bounds read/write in GSO header copy since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-91159 high Discourse: Stored oEmbed HTML injection via allowed iframe since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-91157 high Discourse: Media uploads remain publicly accessible after category permissions are restricted since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-91156 high Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-53615 high util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-53614 high util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2 since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-103929 high mise permits untrusted local configuration to override default shell arguments since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-102695 high OmniFaces: Forged combined-resource IDs and related output/push boundaries since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-101896 high Angular is a development platform for building mobile and desktop web ... since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-97205 high nginx: NGINX ngx_http_core_module vulnerability since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-96615 high NGINX Gateway Fabric vulnerability since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-93479 high nginx: NGINX map directive and regex matching vulnerability since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-91184 high NGINX Gateway Fabric vulnerability since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-53613 high util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-53612 high util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-15176 high nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110642 high xhtml2pdf: xhtml2pdf: Arbitrary command execution via crafted file names since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-101895 high Angular is a development platform for building mobile and desktop web ... since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2017-20286 high DevIL: DevIL: Arbitrary code execution via crafted GIF image since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-104795 high insights-runtime-extractor: insights-runtime-extractor: Container Escape via Privileged Binary Execution since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-90954 high busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-92392 high curl: curl: HTTP/2 upload Use-After-Free since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-94370 high qt-mcu: Qt: Memory corruption via improper string handling in Qt Quick Ultralite since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-92817 high Ignition: Ignition: Arbitrary code execution via improper session privilege validation since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-94453 high libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-110172 high chromium-browser: Use after free in Media since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-110171 high chromium-browser: Use after free in Media since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-110170 high chromium-browser: Use after free in Bindings since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-110169 high chromium-browser: Use after free in V8 since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 