TI-2026-18923 CVE-2026-23490 · GHSA-63vm-454h-vhhq
pyasn1 has a DoS vulnerability in decoder
Priority HIGH 72
pyasn1 is a generic ASN.1 library for Python.
RHSA-2026:5606
Red Hat Ceph Storage
Released 2026-03-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 8 registry.redhat.io/rhceph/rhceph-8-rhel9
Fixes 14 records
TI-2026-00692 CVE-2026-0915 · GHSA-xp56-6525-9chf
getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
Priority HIGH 72
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak…
Priority HIGH 69
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2026-00642 CVE-2026-0861 · GHSA-5pf6-63v3-88hw
Integer overflow in memalign leads to heap corruption
Priority LOW 39
Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in…
TI-2025-13956 CVE-2025-15281 · GHSA-qg56-4cfq-w9w3
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
Priority LOW 39
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to…
TI-2026-18319 CVE-2026-22801
LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*
Priority LOW 33
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2026-18222 CVE-2026-22695
LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)
Priority LOW 31
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
TI-2025-13528 CVE-2025-14831 · GHSA-pm8w-jq9r-x5rp
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Priority LOW 31
A flaw was found in GnuTLS.
TI-2025-14016 CVE-2025-15367 · GHSA-g82h-mgfp-jx8g
POP3 command injection in user-controlled commands
Priority LOW 29
The poplib module, when passed a user-controlled command, can have additional commands injected using newlines.
TI-2025-14015 CVE-2025-15366 · GHSA-4c67-8q63-xrxq
IMAP command injection in user-controlled commands
Priority LOW 29
The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines.
TI-2025-11726 CVE-2025-12801 · GHSA-q8x7-j9x6-2fpc
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
Priority LOW 29
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time.
TI-2026-01014 CVE-2026-1299 · GHSA-jh94-8q48-f3m3
email BytesGenerator header injection due to unquoted newlines
Priority LOW 28
The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.
TI-2026-00646 CVE-2026-0865 · GHSA-5mc7-p6pj-r3f5
wsgiref.headers.Headers allows header newline injection
Priority LOW 27
User-controlled header names and values containing newlines can allow injecting HTTP headers.
TI-2025-09008 CVE-2025-9820 · GHSA-337w-h8w7-m899
Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
Priority LOW 18
A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization.