آخرین آسیب‌پذیری‌ها

PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions

PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles

Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors

Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts

Don't Starve Together Memory Corruption via world_gen_data

HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies

HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload

HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk

HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies

HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them

HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block

HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary

HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk

HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts

RE2JS: Quadratic-time denial of service in re2js lookbehind matching

russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation

Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet

Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability