CVE-2026-107230 high org.asynchttpclient/async-http-client: async-http-client: Information disclosure via improper connection pool partitioning since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-105816 high github.com/hashicorp/vault: Vault: Arbitrary code execution via plugin catalog entries in restored snapshots since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107227 high org.asynchttpclient/async-http-client: AsyncHttpClient: Denial of Service via unbounded WebSocket decompression since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107223 high Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107219 high Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107217 high Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-56851 high golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107216 high Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107215 high Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107214 high Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107212 high Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-92543 high github.com/moby/moby: Docker Engine: Certificate verification bypass via flawed registry DNS check since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-92542 high github.com/moby/moby: Moby: Unauthorized traffic injection via forged VXLAN datagrams since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-62251 high Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106557 high Backstage has improper input validation in TechDocs Markdown extension configuration since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107209 high ImageMagick: ImageMagick: Denial of Service via crafted RSVG image since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106580 high ImageMagick: ImageMagick: Information disclosure via missing security policy check in CUT encoder since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106579 high ImageMagick: ImageMagick: Information disclosure via security policy bypass since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106578 high ImageMagick: ImageMagick: Denial of Service via invalid memory free in MVG decoder since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106576 high ImageMagick: ImageMagick: Denial of Service via crafted XMP profile since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106573 high ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106567 high ImageMagick: ImageMagick: Denial of Service via crafted PSD file since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106565 high ImageMagick: ImageMagick: Denial of Service via missing end-of-file check in bzip2 images since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-77214 high expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106558 high @backstage/plugin-techdocs-node: @backstage/plugin-techdocs-node: Arbitrary code execution via improper markdown extension configuration since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106556 high plugin-techdocs-node: plugin-techdocs-node: arbitrary command execution via configuration sanitization bypass since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106510 high plugin-techdocs-node: plugin-techdocs-node: Arbitrary code execution via crafted mkdocs configuration since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-46569 high In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_c ... since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-46434 high wger: Trainer Privilege Escalation - Improper Privilege Management since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-43976 high wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views) since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-42616 high In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ... since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-107183 high llama.cpp: llama.cpp: Arbitrary code execution via crafted completion request since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-83742 high Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows pla since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-83540 high When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired f since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-16516 high wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiate since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106471 high candlepin: candlepin: broken object-level authorization via VerifyAuthorizationFilter multi-@Verify hasAccess latching since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-106583 high openssh: openssh: Command injection via unvalidated command-line username since at least 24 Oct 2026 07:11 UTC build 7 Oct 2026 CVE-2026-86684 high Gitea push mirror local path check uses the repository owner since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106509 high plugin-techdocs-node: Backstage plugin-techdocs-node: Arbitrary code execution via improper MkDocs configuration validation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106505 high plugin-techdocs-node: @backstage/plugin-techdocs-node: Backstage plugin-techdocs-node: Arbitrary code execution via MkDocs configuration sanitizer bypass since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106503 high plugin-scaffolder-backend: plugin-scaffolder-backend: Authorization bypass via scaffolder action inputs since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106501 high @backstage/plugin-scaffolder-backend: Backstage: Sensitive information exposure in Scaffolder since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106500 high @backstage/plugin-scaffolder-backend: @backstage/plugin-scaffolder-backend: Unauthorized file manipulation via improper task state validation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106555 high openssh: OpenSSH: Information disclosure via GSSAPI authentication state persistence since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106553 high openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106550 high convict: convict: Denial of Service via prototype pollution in config.set() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106547 high hdf5: hdf5: Arbitrary code execution via heap-based buffer overflow since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106488 high plugin-auth-backend-module-oidc-provider: plugin-auth-backend-module-oidc-provider: Privilege escalation via unverified email addresses since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106459 high Backstage: Improper input validation in Sentry scaffolder actions since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-101258 high ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 