TI-2026-13488 CVE-2026-16118 · GHSA-cp7g-r78m-cc2g
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
Priority MEDIUM 64
A flaw was found in xdgmime.
RHSA-2026:80756
Red Hat AI Base Images 3.3.5 (CUDA 13.0)
Released 2026-10-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
Fixes 21 records
TI-2026-12884 CVE-2026-15308 · GHSA-7qj2-q5c8-cxx5
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
Priority MEDIUM 45
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.
TI-2026-46355 CVE-2026-64830 · GHSA-jphx-q7f7-4x8r
FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
Priority MEDIUM 41
FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declar…
TI-2026-10297 CVE-2026-11940 · GHSA-9mc4-rqmq-h467
tarfile extraction filter bypass allows escaping the destination directory
Priority MEDIUM 41
tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.
Priority LOW 39
Vim is an open source, command line text editor.
Priority LOW 38
Vim is an open source, command line text editor.
Priority LOW 38
Vim is an open source, command line text editor.
TI-2026-10207 CVE-2026-11824 · GHSA-8g48-4wfm-7247
SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
Priority LOW 38
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…
Priority LOW 37
Vim is an open source, command line text editor.
TI-2026-51283 CVE-2026-73076
Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`
Priority LOW 37
Vim is an open source, command line text editor.
Priority LOW 37
Vim is an open source, command line text editor.
Priority LOW 37
Vim is an open source, command line text editor.
TI-2026-39261 CVE-2026-54369 · GHSA-53ch-pxc8-6g72
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
Priority LOW 37
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…
TI-2026-34752 CVE-2026-47162
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
Priority LOW 34
Vim is an open source, command line text editor.
Priority LOW 33
Vim is an open source, command line text editor.
TI-2026-10205 CVE-2026-11822 · GHSA-6qj8-gw6p-hc5p
SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek
Priority LOW 31
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.
TI-2026-51273 CVE-2026-73066
Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata
Priority LOW 29
Tesseract is an open source OCR engine.
Priority LOW 26
Vim is an open source, command line text editor.
TI-2026-34757 CVE-2026-47167
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Priority LOW 24
Vim is an open source, command line text editor.
TI-2026-41387 CVE-2026-57455
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
Priority LOW 20
Vim is an open source, command line text editor.
TI-2025-05580 CVE-2025-6170 · GHSA-6qrf-r65h-2r77
Libxml2: stack buffer overflow in xmllint interactive shell command handling
Priority LOW 13
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.