← All tracked CVEs
Updated 02:00
1177 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | High | PYSEC-2026-3456: pyasn1 <0.6.4 BER/CER/DER OID quadratic-time decode/encode enables DoS with many arcs | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | High | PYSEC-2026-3455: pyasn1 <0.6.4 BER/CER/DER decoder unbounded long-form tag parsing causes DoS and ValueError | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | High | PYSEC-2026-2263: Decoding ASN.1 deeply nested indefinite-length SEQUENCE/SET triggers DoS in pyasn1 <0.6.3 | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | High | GHSA-m4p7-r5rc-7g4j: pyasn1 BER/CER/DER decoder unbounded tag IDs cause quadratic CPU and unhandled ValueError | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | High | GHSA-jr27-m4p2-rc6r: pyasn1 BER decoder DoS via uncontrolled recursion on deeply nested indefinite SEQUENCE/SET causing RecursionError/OOM | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | High | GHSA-hm4w-wwcw-mr6r: pyasn1 Real float conversion DoS from untrusted ASN.1 REAL with huge exponent | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | High | GHSA-8ppf-4f7h-5ppj: pyasn1 OID/Relative-OID BER/CER/DER encode/decode quadratic by arcs, causing DoS | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | High | secure-packages-25.11 | Sep 16, 2026 | ||
| Fixed | High | RISC-V: Uninitialized cregs overwrite pt_regs after copyin failure, corrupting registers/leaking stack | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | High | ebtables lacked two-stage removal, exposing partially initialized table via racy ops assignment | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | High | Core ebtables init race: sockopts exposed globally before initialization completes | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | High | Linux kernel netfs_read_folio() fails to wait on writeback, misinterpreting dirty flag and folio->private | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | Critical | EVP_Cipher() skips AEAD tag verification on empty ciphertext for ChaCha20-Poly1305 and AES-OCB | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | High | OpenSSL CMP fails to type-check protectionAlg; invalid cast triggers NULL deref DoS | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | High | OpenSSL QUIC retains ACK-only packet metadata, causing unbounded memory growth and DoS risk. | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | Medium | OpenSSL CMP extraCerts cached indefinitely causing unbounded memory growth/DoS with reused OSSL_CMP_CTX | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | Critical | OpenSSL CMP response validation uses attacker-controlled DN as format string, causing client DoS | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | High | OpenSSL CMS_decrypt AES-WRAP-PAD unwrap mis-sized buffer causes 8-byte out-of-bounds heap write | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | High | OpenSSL DTLS buffers entire read buffers for future-epoch handshake records, causing memory amplification DoS | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | High | NULL-pointer dereference in RPK-only TLS configs upon signature_algorithms_cert extension, causing DoS | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | Medium | GStreamer gst-plugins-good avidemux vprp parser OOB read via crafted AVI causes DoS | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | High | PYSEC-2026-3072: ReDoS via catastrophic backtracking in soupsieve attribute value regex on unterminated quotes | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | High | PYSEC-2026-3071: Soupsieve unbounded memory allocation parsing large comma-separated selectors enables DoS via amplification | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | High | GHSA-836r-79rf-4m37: soupsieve CSS selector parser ReDoS: catastrophic backtracking on unterminated quoted attribute value | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | High | GHSA-2wc2-fm75-p42x: Soupsieve CSS parser allocates unbounded memory for large comma-separated selector lists, causing DoS | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | Medium | ConfigParser write() allows key/value injection via CR in attacker-controlled multiline values | secure-packages-25.11 | Sep 14, 2026 | |
| Fixed | High | Incomplete CVE-2026-0672 fix allows control characters via Morsel.update, |=, unpickling; BaseCookie.js_output lacks output validation | secure-packages-26.05 | Sep 14, 2026 |