CVE-2026-102621 low poppler: poppler: Denial of Service via integer overflow in SplashClip 27 Oct 2026 01:25 UTC build 29 Sep 2026 CVE-2026-98055 low kernel: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails 27 Oct 2026 01:25 UTC build 25 Sep 2026 CVE-2026-96546 low gimp: gimp: one-byte out-of-bounds heap read in the uncompressed DDS loader 27 Oct 2026 01:25 UTC build 23 Sep 2026 CVE-2026-116190 low github.com/rclone/rclone: rclone: Information disclosure via cross-host HTTP redirects 26 Oct 2026 19:14 UTC build 25 Oct 2026 CVE-2026-106073 low nodejs: Node.js: Filesystem read permission bypass via fs.realpathSync() 26 Oct 2026 19:14 UTC build 23 Oct 2026 CVE-2026-98874 low kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect 26 Oct 2026 19:14 UTC build 23 Oct 2026 CVE-2026-98873 low kernel: netfilter: nf_conntrack_expect: zero at allocation time 26 Oct 2026 19:14 UTC build 23 Oct 2026 CVE-2026-112769 low Parse Server before 8.6.98 and 9.x before 9.10.3 Session Class-Level Permission Bypass 26 Oct 2026 14:38 UTC build 19 Oct 2026 CVE-2026-116160 low ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation 26 Oct 2026 07:15 UTC build 25 Oct 2026 CVE-2026-116158 low ImageMagick: ImageMagick: Denial of Service via memory leak in compare command 26 Oct 2026 07:15 UTC build 25 Oct 2026 CVE-2026-116157 low ImageMagick: ImageMagick: Denial of Service via memory leak in PerlMagick 26 Oct 2026 07:15 UTC build 25 Oct 2026 CVE-2026-116156 low ImageMagick: ImageMagick: Denial of Service via memory leak in -set profile option 26 Oct 2026 07:15 UTC build 25 Oct 2026 CVE-2026-116153 low ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations 26 Oct 2026 07:15 UTC build 25 Oct 2026 CVE-2026-116143 low ImageMagick: ImageMagick: Denial of Service via scene selection policy bypass 26 Oct 2026 07:15 UTC build 25 Oct 2026 CVE-2026-116140 low ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing 26 Oct 2026 07:15 UTC build 25 Oct 2026 CVE-2026-116137 low adm-zip: adm-zip: File integrity check bypass via duplicate archive entries 26 Oct 2026 07:15 UTC build 25 Oct 2026 GHSA-h4fr-cmh5-qr62 low Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root since at least 24 Oct 2026 07:11 UTC build 23 Oct 2026 GHSA-xmj3-9gf7-h52w low setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description since at least 24 Oct 2026 07:11 UTC build 23 Oct 2026 CVE-2026-83813 low twisted: twisted: DNS spoofing via missing response source verification since at least 24 Oct 2026 07:11 UTC build 23 Oct 2026 CVE-2026-115569 low Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root since at least 24 Oct 2026 07:11 UTC build 23 Oct 2026 CVE-2026-54711 low PGHoard: Password written to debug log since at least 24 Oct 2026 07:11 UTC build 23 Oct 2026 CVE-2026-115730 low i18next-http-backend: i18next-http-backend: Cross-site scripting via protocol-relative URL injection since at least 24 Oct 2026 07:11 UTC build 23 Oct 2026 CVE-2026-114614 low authlib: Authlib: Transport security bypass via improper URL validation since at least 24 Oct 2026 07:11 UTC build 22 Oct 2026 CVE-2026-115393 low wasmtime: wasmtime: Memory corruption via cross-engine object validation failure since at least 24 Oct 2026 07:11 UTC build 22 Oct 2026 CVE-2026-115389 low wasmtime: wasmtime: Denial of Service via untracked host memory allocation in Val API since at least 24 Oct 2026 07:11 UTC build 22 Oct 2026 CVE-2026-115386 low wasmtime: wasmtime: Information disclosure via uninitialized struct padding in fd_readdir since at least 24 Oct 2026 07:11 UTC build 22 Oct 2026 GHSA-c6gr-qvv4-5v3f low DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml since at least 24 Oct 2026 07:11 UTC build 22 Oct 2026 CVE-2026-115319 low github.com/junegunn/fzf: fzf: Denial of Service via inefficient string concatenation since at least 24 Oct 2026 07:11 UTC build 22 Oct 2026 CVE-2026-114501 low pillow: Pillow: Information disclosure via improper memory alignment during Arrow export since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-114130 low Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-114124 low Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-114122 low Electron: Frame subscription trusts GPU-supplied frame geometry since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-113797 low Electron: Extension tabs.query returns tab URLs and titles without the tabs permission since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-114370 low undertow: undertow: PathResourceManager safePaths check allows sibling-directory symlink traversal since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-113786 low pypdf: pypdf: Denial of Service via unintended image parser invocation since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-114061 low SvelteKit : XSS via untrusted cache-control header in prerendered page since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-114060 low SvelteKit: URL redirection to untrusted site via enhanced form submission since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-114049 low vllm: vLLM: Output manipulation via stale token filter reuse in batch processing since at least 24 Oct 2026 07:11 UTC build 21 Oct 2026 CVE-2026-91461 low openjdk: Enhance TLS Extensions (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-91409 low openjdk: Enhance QUIC connections (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-91402 low openjfx: openjfx: information disclosure via untrusted code execution since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-91400 low openjdk: Enhance MIDI file handling (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-91397 low openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-91381 low openjdk: Enhance Font Rendering (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-91335 low openjdk: Enhance Image Handling (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-91334 low openjdk: Enhance JPEG loading (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-91333 low openjdk: Improve ciphertext handling (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-87367 low openjdk: Enhance Template Handling (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-87292 low openjdk: Enhance Network Clients (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 CVE-2026-87255 low openjdk: Enhance Vector Processing (Oracle CPU 2026-10) since at least 24 Oct 2026 07:11 UTC build 20 Oct 2026 