CVE-2026-100799 medium firefox: Uninitialized memory in the Graphics: WebGPU component since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-100798 medium firefox: Cryptography misuse in Storage: Quota Manager component since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-100797 medium firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-100796 medium Use-after-free in the JavaScript: WebAssembly component. This vul ... since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-100795 medium firefox: Denial-of-service in the Networking component since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-100794 medium firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization component since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-100765 medium Use-after-free in the JavaScript: WebAssembly component. This vulnerab ... since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-100764 medium Privilege escalation due to incorrect boundary conditions in the ... since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-96422 medium wireshark: Reachable Assertion in Wireshark since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-96421 medium wireshark: Wireshark: Denial of Service via USB HID dissector infinite loop since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-96420 medium wireshark: Buffer Over-read in Wireshark since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-96418 medium wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissector since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-96417 medium wireshark: wireshark: Denial of Service via malformed RF4CE packet since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-96416 medium wireshark: Wireshark: Denial of Service via malformed IEEE 802.11 packet processing since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-96415 medium wireshark: Stack-based Buffer Overflow in Wireshark since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95395 medium wireshark: wireshark: Denial of Service via memory leak in IEEE C37.118 Synchrophasor dissector since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95393 medium wireshark: Heap-based Buffer Overflow in Wireshark since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95392 medium wireshark: Buffer Over-read in Wireshark since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95391 medium wireshark: Use After Free in Wireshark since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95390 medium wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC file since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95388 medium wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-95386 medium wireshark: wireshark: Denial of Service via infinite loop in TTL file parser since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-8937 medium Missing Authorization in GitLab since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-15390 medium Das U-Bootwith CONFIG_IP_DEFRAG=y parameter fails to clear IP reassemb ... since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-10518 medium Incorrect Authorization in GitLab since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-102474 medium dash: dash: Heap out-of-bounds write in conv_escape via undersized Unicode escape reservation since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-102473 medium dash: dash: Super-polynomial backtracking in pmatch when libc fnmatch is disabled since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-97029 medium flatpak: flatpak: Sandboxed app can signal unsandboxed processes in the same process group since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 CVE-2026-102414 medium pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's bloc ... since at least 24 Oct 2026 07:11 UTC build 29 Sep 2026 GHSA-6vj9-mwq6-2f5v medium Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-102277 medium brace-expansion: brace-expansion: Denial of Service via crafted brace patterns since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-102270 medium pyjwt: pyjwt: Denial of Service via regular expression backtracking in is_pem_format since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-102269 medium pyjwt: PyJWT: Token revocation bypass via non-canonical signature decoding since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-102265 medium pyjwt: pyjwt: Denial of Service via deeply nested token headers since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101914 medium @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-102010 medium gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-55156 medium Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101913 medium ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101912 medium ip-address: ip-address: Access control bypass via cross-family subnet comparison since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101911 medium ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101910 medium ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address range since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101908 medium axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollution since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101907 medium axios: Axios: Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101904 medium axios: Axios: HTTP header injection via inherited prototype properties since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101902 medium axios: axios: Unintended HTTP method override via prototype pollution gadget since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101900 medium axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapter since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101898 medium axios: axios: Security control bypass via unapplied HTTP/2 proxy and DNS settings since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101101 medium ag-ui: ag-ui: Denial of Service via uncaught JSON parsing exception since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-101100 medium @ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 CVE-2026-88816 medium perl-DBI: perl-DBI: Denial of Service via numeric FetchHashKeyName attribute since at least 24 Oct 2026 07:11 UTC build 28 Sep 2026 