CVE-2026-106217 medium chromium-browser: Missing authorization in Google Lens since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106216 medium chromium-browser: Cross-site request forgery in ReadingList since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106213 medium chromium-browser: Race condition in WebAudio since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106212 medium chromium-browser: Incorrect authorization in Autofill since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106210 medium chromium-browser: Observable discrepancy in Scroll since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106209 medium chromium-browser: UI misrepresentation in Mobile since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106208 medium chromium-browser: Missing authorization in API since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106207 medium chromium-browser: Race condition in V8 since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106206 medium chromium-browser: Improper input validation in Mobile since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106205 medium chromium-browser: Missing authorization in Passwords since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106201 medium chromium-browser: Race condition in V8 since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106194 medium chromium-browser: Missing authorization in WebAppInstalls since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106189 medium chromium-browser: Code injection in ReaderMode since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106185 medium chromium-browser: Improper input validation in Viz since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106183 medium chromium-browser: Missing authorization in Chromoting since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106182 medium chromium-browser: UI misrepresentation in Paint since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106181 medium chromium-browser: Incorrect reference resolution in DevTools since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106180 medium chromium-browser: Observable discrepancy in Animation since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106123 medium The RabbitMQ Java client library allows Java and JVM-based application ... since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106120 medium LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106119 medium LangChain: MongoDBChatMessageHistory query injection can allow cross-session access since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106033 medium ansible: ansible-ui: Ansible UI DOM XSS in /redirect next parameter since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-103778 medium Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-88252 medium sssd: sssd: Denial of Service via responder connection retry loop during file descriptor exhaustion since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106116 medium ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106114 medium ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106111 medium ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106109 medium Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105867 medium Payload: Client uploads could overwrite S3 objects since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105864 medium @payloadcms/plugin-multi-tenant has a cross-tenant create issue since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105853 medium Payload: Token refresh and password reset responses may expose restricted user fields since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105847 medium Payload: Polymorphic join queries could disclose hidden fields since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105846 medium Payload: Untrusted redirect URL parameter exploit since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105805 medium Payload: Sort queries could expose protected field information since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105804 medium Payload: Password hashes use insufficient PBKDF2 iterations since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 GHSA-2r3x-4mrv-mcxf medium Vyper: Memory corruption using function calls within tuples / nested calls since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 GHSA-4v7v-gqf9-ww2g medium Vyper: Call stack corruption when passing complex type containing non-base type members as argument since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 GHSA-vg88-3v92-rjx2 medium Vyper: Return inside for loop more than 1 level deep since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-87975 medium django: Privilege abuse in model formsets with editable primary keys since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-87890 medium django: Server-side request forgery via unvalidated bytes in spatial lookups since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-84429 medium django: Denial of service via quadratic parsing complexity in parse_header_parameters() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-77050 medium django: Denial of service via unbounded caching of long language codes in get_supported_language_variant() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-105842 medium lrzsz: lrzsz: Denial of Service via heap-based buffer overflow from oversized filenames since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 GHSA-j8f7-x8jm-wmm4 medium Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling) since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-106016 medium Mitigation bypass in the File Handling component. This vulnerabil ... since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-75819 medium aspell: aspell: Denial of Service via crafted dictionary file since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98372 medium kernel: xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98371 medium kernel: xfrm: iptfs: fix runt reassembly panic from short inner tot_len since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98370 medium kernel: xfrm: fix compat ALLOCSPI request use-after-free since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 CVE-2026-98369 medium kernel: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() since at least 24 Oct 2026 07:11 UTC build 6 Oct 2026 