CVE-2026-102467 medium In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implement since at least 24 Oct 2026 07:11 UTC build 15 Oct 2026 CVE-2026-110872 medium nodemailer: nodemailer: Denial of Service via inefficient SMTP reply parsing since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110871 medium nodemailer: nodemailer: Denial of Service via inefficient header parsing since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110870 medium nodemailer: nodemailer: Domain allow-list bypass via improper address comment parsing since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110868 medium renovate: Renovate: Information disclosure via Server-Side Request Forgery since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110866 medium renovate: Renovate: Protection mechanism bypass via pull request rebase since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110860 medium GitPython: GitPython: Arbitrary file relocation via symbolic link traversal in Submodule.move() since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110855 medium GitPython: GitPython: Information disclosure via environment variable expansion in submodule names since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110836 medium freerdp: freerdp: Denial of Service via crafted gateway Content-Type header since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110835 medium freerdp: freerdp: HTTP header injection via crafted proxy routing token since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110834 medium freerdp: freerdp: Denial of Service via out-of-lifecycle serial requests since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110832 medium freerdp: freerdp: Denial of Service via memory exhaustion in dynamic virtual channels since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110831 medium freerdp: FreeRDP: Denial of Service via file handle leak during drive redirection since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110829 medium freerdp: FreeRDP: Denial of Service via malformed rdpsnd channel fragment since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110816 medium qs: qs: Denial of Service via unhandled exception during array serialization since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110772 medium sure: sure: Unauthorized transaction modification via bulk update missing authorization since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-102682 medium Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-102460 medium io.vertx/vertx-web: vertx-web: Authorization bypass via ChainAuthHandler scope validation failure since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86856 medium dpdk: dpdk: Stack and heap buffer overflow in nfp vDPA driver since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86849 medium dpdk: dpdk: Integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86847 medium dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86846 medium dpdk: dpdk: Guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86845 medium dpdk: dpdk: Guest-triggered use-after-free and type confusion in vhost-crypto session cleanup since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86566 medium dpdk: dpdk: Guest with runt RX descriptors underflows copy length in vhost enqueue (split and packed rings) since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110777 medium evolution-data-server: local file disclosure via ATTACH file:// URIs since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-107348 medium pgbouncer: pgbouncer: Denial of Service via integer overflow in message buffer growth since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-103975 medium Appium: Symlink based Zip Slip in @appium/support ZIP extraction since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-96596 medium erlang: hex_core: hex: rebar3: erl_tar: Denial of Service via crafted GNU sparse TAR archive since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-94200 medium erlang: Erlang: Denial of Service via malformed TLS 1.3 session ticket since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-67418 medium rabbitmq-server: rabbitmq-server: Denial of Service via invalid MQTT PUBLISH property since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-105236 medium erlang: erlang: Authentication bypass via TLS session resumption across virtual hosts since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-93683 medium dpdk: dpdk: Guest-triggered out-of-bounds walk via vhost indirect descriptor length TOCTOU since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-86561 medium dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-67416 medium rabbitmq-server: rabbitmq-server: Denial of Service via improper AMQP message descriptor validation since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-67414 medium rabbitmq-server: rabbitmq-server: Denial of Service via memory exhaustion in AMQP parser since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-62858 medium YOURLS: Unauthenticated File Inclusion since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-100394 medium Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-97629 medium nginx: nginx: Client certificate verification bypass via forged SSL sessions since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-95101 medium nginx: nginx: Data injection in proxied requests via HTTP/3 request buffering since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-84471 medium The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN ... since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-59766 medium Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times` since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110263 medium org.ow2.asm/asm: OW2 ASM: Denial of Service via uncontrolled recursion in SignatureReader since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110261 medium org.ow2.asm/asm: OW2 ASM: Denial of Service via crafted class files during frame computation since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110260 medium org.ow2.asm/asm: OW2 ASM: Denial of Service via crafted class file with overlapping exception handlers since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110258 medium org.ow2.asm/asm: OW2 ASM: Denial of Service via excessive memory allocation since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-110257 medium org.ow2.asm/asm: OW2 ASM: Denial of Service via excessive memory allocation since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-107381 medium svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-98429 medium kernel: RDMA/efa: Keep EQ resources alive while IRQ is registered since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-98428 medium kernel: ALSA: usb: 6fire: Avoid embedded URBs since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 CVE-2026-98426 medium kernel: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path since at least 24 Oct 2026 07:11 UTC build 14 Oct 2026 