CVE Notifier

CVE-2026-62282 CWE-918 6.5

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated …

cve.org opencve:opencve 1 hari lalu

CVE-2026-93560 CWE-1035 7.5

Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos

A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integer truncation vulnerability could lead t…

cve.org Red · Hat:Red · Hat 1 hari lalu

CVE-2026-93606 CWE-693 10.0

vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species

vm2 (npm) versions 3.12.0 and earlier contain a sandbox escape in `VM` and `NodeVM`. When an embedder exposes a host API that returns a host-realm Promise, the bridge's rejection sanitizer (hostPromiseSanitizeReject / ma…

cve.org patriksimek:vm2 1 hari lalu

CVE-2026-93605 CWE-693 10.0

vm2 NodeVM before 3.12.1 Remote Code Execution via child_process

vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking other host-spawning modules. Attackers can require child_process and exe…

cve.org patriksimek:vm2 1 hari lalu

CVE-2026-93604 CWE-284 7.2

vm2 3.11.8 Sandbox Escape via crypto.setFips

vm2 through 3.12.0 exposes Node.js's crypto.setFips() function to untrusted guest code when an embedder explicitly allowlists the crypto builtin for a NodeVM (require.builtin: ['crypto']). The builtin sanitizer (sanitize…

cve.org patriksimek:vm2 1 hari lalu

CVE-2026-93603 CWE-94 10.0

vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function

vm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the apply trap of its bridge (lib/bridge.js): when sandboxed code calls a host-provided non-strict (sloppy-mode) function withou…

cve.org patriksimek:vm2 1 hari lalu

CVE-2026-93602 CWE-299 4.4

rustls-webpki before 0.103.10 CRL Revocation Check Bypass

rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distr…

cve.org rustls:webpki 1 hari lalu

CVE-2026-93601 CWE-295 2.2

rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass

rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. Fo…

cve.org rustls:webpki 1 hari lalu

CVE-2026-93600 CWE-295 2.2

rustls webpki Name Constraints URI Validation Bypass

rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than…

cve.org rustls:webpki 1 hari lalu

CVE-2026-93599 CWE-191 7.5

rustls-webpki before 0.103.13 Panic via empty BIT STRING

rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is e…

cve.org rustls:webpki 1 hari lalu

CVE-2026-93598 CWE-184 N/A

ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle

ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1 contains an incomplete deny-list in the polyglot script sandbox: com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED lists java.util.ResourceBund…

cve.org ArcadeData:arcadedb 1 hari lalu

CVE-2026-93597 CWE-918 7.7

ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addres…

cve.org ArcadeData:arcadedb 1 hari lalu