TI-2026-31912 CVE-2026-43823
Double free in Apple swift-crypto
Priority HIGH 72
When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit.
RHSA-2026:45784
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-07-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images nodejs24-1:24.18.0-0.5.hum1@aarch64, nodejs24-1:24.18.0-0.5.hum1@src, nodejs24-1:24.18.0-0.5.hum1@x86_64 +14
Fixes 2 records
TI-2026-12072 CVE-2026-14257 · GHSA-mh99-v99m-4gvg
brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash
Priority MEDIUM 40
brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.