enterprise_linux vulnerabilities
CVEs whose affected-version data names the enterprise_linux package (npm, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
1229 CVEsRSS
CVE-2026-101796High· 7.5mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)
A flaw was found in the Replication component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory…
CVE-2026-101802Medium· 6.5mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)
A flaw was found in the MySQL Server Parser component. An authenticated remote attacker with low privileges can exploit this vulnerability through network access using multiple protocols. A successful attack can cause the service to hang o…
CVE-2026-101800Medium· 6.8mysql: mysql: unauthorized data access via improper privilege controls (CVE-2026-101800)
A flaw was found in the Security: Privileges component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU…
CVE-2026-101803Medium· 6.5mysql: mysql: unauthorized data modification via XML component (CVE-2026-101803)
A flaw was found in the XML component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for com…
CVE-2026-108518Medium· 4.7perl-dbi: perl-dbi: Denial of Service via type confusion in dbi_profile (CVE-2026-108518)
A flaw was found in the perl-dbi package. A type confusion vulnerability in the profiling feature can lead to an invalid memory dereference, causing the application to crash and resulting in a Denial of Service (DoS). A user or attacker ca…
CVE-2026-111879Medium· 5.5perl-DBI: perl-DBI: Denial of Service via unreleased table lock on error (CVE-2026-111879)
A flaw was found in perl-DBI. When creating or opening a database table in the DBD::DBM module fails due to an error, an exclusive file lock acquired during initialization is not properly released. A user or attacker who can control connec…
CVE-2026-91381Low· 3.7openjdk: Enhance Font Rendering (Oracle CPU 2026-10) (CVE-2026-91381)
A flaw was found in OpenJDK. This vulnerability allows an unauthenticated remote attacker to cause unauthorized data modification or deletion by submitting untrusted input to APIs in the 2D graphics component. Exploitation can occur throug…
CVE-2026-91396Medium· 6.5openjdk: Improve Pack200 handling (Oracle CPU 2026-10) (CVE-2026-91396)
A flaw was found in the Utility component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by supplying untrusted data to component APIs over the network. A successful attack can allow unauthorized modification…
CVE-2026-91395Medium· 6.5openjdk: Enhance Pack200 unpacking (Oracle CPU 2026-10) (CVE-2026-91395)
A flaw was found in the Utility component of Java SE and GraalVM. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to exposed application programming interfaces (APIs). A su…
CVE-2026-91417Medium· 5.3openjdk: Enhance CORBA (Oracle CPU 2026-10) (CVE-2026-91417)
A flaw was found in the Common Object Request Broker Architecture (CORBA) component of OpenJDK. An unauthenticated remote attacker could exploit this flaw by sending specially crafted data to exposed application programming interfaces (API…
CVE-2026-113242High· 8.8chromium-browser: angle: Memory corruption in ANGLE (CVE-2026-113242)
A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/550626693
CVE-2026-113315High· 8.8chromium-browser: angle: Memory corruption in ANGLE (CVE-2026-113315)
A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/553117511
CVE-2026-113234High· 8.8chromium-browser: angle: Memory corruption in ANGLE (CVE-2026-113234)
A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/556750158
CVE-2026-113266High· 8.8chromium-browser: angle: Memory corruption in ANGLE (CVE-2026-113266)
A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/561499641
CVE-2026-113293High· 8.8chromium-browser: angle: Use after free in ANGLE (CVE-2026-113293)
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/562040486
CVE-2026-113273High· 8.8chromium-browser: angle: Memory corruption in ANGLE (CVE-2026-113273)
A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/561999377
CVE-2026-113285High· 8.8chromium-browser: angle: Memory corruption in ANGLE (CVE-2026-113285)
A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/563355257
CVE-2026-113210High· 8.8chromium-browser: angle: Use after free in ANGLE (CVE-2026-113210)
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/563354824
CVE-2026-113334High· 8.8chromium-browser: angle: Improper input validation in ANGLE (CVE-2026-113334)
An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/564064199
CVE-2026-113295High· 8.8⚖ disputedchromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-113295)
An out of bounds read flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/568897206
CVE-2026-113340Medium· 6.5chromium-browser: angle: Memory corruption in ANGLE (CVE-2026-113340)
A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/564213722
CVE-2026-111767High· 8.6@modelcontextprotocol/sdk: @modelcontextprotocol/sdk: Unauthorized cross-session task access via taskStore (CVE-2026-111767)
A flaw was found in the Model Context Protocol (MCP) TypeScript SDK (@modelcontextprotocol/sdk). The experimental task storage feature (taskStore) does not verify which client session created a given task when multiple clients share a task…
CVE-2025-71436High· 7.1PoCraptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436)
A flaw was found in raptor2. The library improperly handles language tag lengths when parsing RDF (Resource Description Framework) documents, truncating lengths that exceed 255 bytes. A remote attacker can exploit this vulnerability by sup…
CVE-2026-101201Medium· 5.5qt5-qtbase: qt6-qt5compat: qt: Denial of Service via out-of-bounds read in QBinaryJson (CVE-2026-101201)
A flaw was found in Qt. An out-of-bounds read vulnerability can occur when parsing a binary file with a malformed header in the QBinaryJson::fromBinaryData() function. An attacker could exploit this flaw by convincing a user or application…
CVE-2026-112892High· 7.5pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder (CVE-2026-112892)
A flaw was found in Pillow. A remote attacker can cause a Denial of Service (DoS) by supplying a specially crafted Microsoft Paint (MSP) image file to an application that processes image pixels. Due to missing expansion limits during decom…
CVE-2026-111757Medium· 5.3hono: hono: Information disclosure via malformed percent-encoded paths in serveStatic (CVE-2026-111757)
A flaw was found in Hono's serveStatic middleware. This vulnerability allows a remote attacker to cause unauthorized information disclosure by bypassing path-based access controls. Because serveStatic decodes request paths a second time be…
CVE-2026-8168Medium· 6.5qt5-qtsvg: qt6-qtsvg: qt: Denial of Service via deeply nested SVG elements (CVE-2026-8168)
A flaw was found in the Qt SVG module. A remote attacker could trigger this issue by providing a specially crafted SVG (Scalable Vector Graphics) file containing deeply nested elements. When parsed, this leads to uncontrolled recursion and…
CVE-2026-112027Medium· 5.3PoCcms: light0011 cms: Information disclosure via filename manipulation in Uploadify (CVE-2026-112027)
A flaw was found in the Uploadify component of light0011 cms. A remote attacker can exploit an improper input handling vulnerability by manipulating the filename parameter in the check-exists script. This issue leads to information disclos…
CVE-2026-98702Medium· 6.5kernel: kernel: Denial of Service via invalid channel switch frame in mac80211 (CVE-2026-98702)
A flaw was found in the Linux kernel's mac80211 wireless subsystem. A nearby wireless attacker can cause a Denial of Service (DoS) by sending a crafted Channel Switch Announcement (CSA) frame with an unsupported bandwidth configuration. Be…
CVE-2026-98728Low· 2.5kernel: tpm: fix off-by-four bounds check in tpm2_get_random() (CVE-2026-98728)
A flaw was found in the Linux kernel's Trusted Platform Module (TPM) driver. This flaw can lead to information disclosure when the kernel requests random data. Due to an incorrect bounds check when processing session-tagged responses, a tr…