← All tracked CVEs
Updated 15:01
1007 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | High | Integer overflow/wraparound in Apache Thrift C++, c_glib, Go, netstd, Delphi, Haxe before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Inefficient complexity enables unbounded resource allocation in Apache Thrift Node.js before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Improper handling of highly compressed data in Apache Thrift Ruby bindings before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Improper handling of compressed data causes amplification in Apache Thrift versions prior to 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Apache Thrift C++ improper TLS certificate host validation vulnerability before version 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Critical | Improper TLS certificate hostname validation in Apache Thrift c_glib before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Resource allocation without limits/throttling in Apache Thrift Java bindings 0.19.0 to <0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Infinite loop vulnerability in Apache Thrift Python, Go, PHP, Java bindings before 0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Apache Thrift pre-0.23.0 multiple vulns: origin validation, path traversal, HTTP splitting, DoS | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Apache Thrift <0.23.0: Improper TLS certificate host validation vulnerability | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Excessive size memory allocation vulnerability in Apache Thrift prior to 0.23.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Uncontrolled recursion vulnerability in Apache Thrift Node.js bindings before 0.23.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Apache Thrift Python bindings vulnerable to data amplification via highly compressed data pre-0.24.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Out-of-bounds read vulnerability in Apache Thrift prior to 0.23.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Uncontrolled recursion vulnerability in Apache Thrift prior to 0.23.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Integer overflow/wraparound vulnerability in Apache Thrift before 0.23.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Out-of-bounds read vulnerability in Apache Thrift versions prior to 0.23.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Integer overflow/wraparound vulnerability in Apache Thrift Go TFramedTransport before 0.23.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Crafted requests trigger free(): invalid pointer crash in Apache Thrift c_glib pre-0.23.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | PYSEC-2026-69: Password resets don't revoke sessions due to persistent cookie secret in Jupyter Server <=2.17.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | PYSEC-2026-68: Authenticated path traversal in Jupyter Server <=2.17.0 escapes root_dir to shared-prefix sibling directories via /api/contents | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | PYSEC-2026-67: Jupyter Server <=2.17.0 login 'next' parameter open redirect enables phishing | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Critical | PYSEC-2026-366: Jupyter nbconvert handlers lack CSP sandbox, enabling stored XSS via unsanitized HTMLExporter output | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | PYSEC-2026-3472: jupyter-server CORS origin validation bypass via re.match in allow_origin_pat (1.12–2.17) | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | PYSEC-2026-2532: Path traversal allows unauthorized sibling directory access in jupyter-server 2.17.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | PYSEC-2026-2294: UltraJSON <5.13.0 accepts malformed UTF-8 when reject_bytes=False, enabling validation bypass/data integrity issues | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | PYSEC-2026-2187: CORS origin validation bypass via allow_origin_pat re.match in Jupyter Server <=2.17.0 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | GHSA-qh7q-6qm3-653w: Open redirect via ?next in Jupyter Server <=2.17.0 enables external phishing redirects | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Critical | GHSA-fcw5-x6j4-ccmp: Jupyter nbconvert serves unsandboxed notebook HTML; non-sanitized output enables stored XSS, token exfiltration | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | GHSA-5mrq-x3x5-8v8f: Jupyter Server static cookie secret allows stolen sessions to persist despite password changes | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | GHSA-5789-5fc7-67v3: Jupyter Server <=2.17.0 allows sibling directory access if names share root prefix | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | GHSA-3j69-69wj-xqx2: ujson reject_bytes=False rewrites malformed UTF-8 bytes, enabling validation bypass and data corruption | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | GHSA-24qx-w28j-9m6p: Jupyter Server <=2.17.0 Origin validation bug: re.match allows spoofed domains to pass | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | xmlXIncludeProcess/Tree in libxml2 <2.15.4 ignore parseFlags, bypassing XML_PARSE_NONET; XXE/SSRF/DoS | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | libxml2 xmlIO lacks integer overflow check, negative lengths passed to write callbacks pre-2.15.4 security risk | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | libxml2 <2.15.4 heap buffer overflow in xmlXPtrEvalXPtrPart via xpointer length saturation | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Low | libxml2 xmlregexp NULL pointer dereference in xmlRegNewParserCtxt after strdup failure (<2.15.4) | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | libxml2 <2.15.4: xmlSnprintfElements strcat stack-based buffer overflow in valid.c | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Integer overflow in libxml2 xmlURIEscapeStr (uri.c) before 2.15.4 | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | libxml2 <2.15.4 xmlDictAddQString integer overflow causes heap-based buffer overflow | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Low | libxml2 <2.15.4: xmlregexp NXT macro out-of-bounds read in xmlFAParsePosCharGroup | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | ReTrap DNSSEC algorithmic-complexity DoS bugs in Unbound ≤1.26.0: TagTrap, DelegationTrap, NsecTrap, AdditionalTrap | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Unbound 1.12–1.26 DoH libnghttp2 use-after-free on failure paths causes DoS | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Critical | Unbound <=1.26.0 heap overflow via CNAME TTL rewrite and compression pointer; RCE risk | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Critical | Unbound ≤1.26.0 DNSSEC DNSKEY compression buffer overflow enables DoS and possible RCE | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Unbound ≤1.26.0 heap overflow in RRSet canonicalisation with 255-length query and large TCP response | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Unbound <=1.26.0 TCP/DoT unbounded reads let attackers monopolize single worker event loop | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | Use-after-free in Unbound DoQ with ngtcp2 on RESET_STREAM leads to crash (1.22.0–1.26.1) | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | Medium | strongSwan libcharon 5.9.7-6.0.7 IKEv2 state machine mishandles CREATE_CHILD_SA enabling auth bypass | secure-packages-26.05 | Sep 30, 2026 | |
| Fixed | High | Incorrect access control in strongSwan eap-ttls/eap-peap due to missing or mismatched inner EAP identity (4.5.0–6.0.7) | secure-packages-26.05 | Sep 30, 2026 |