2026

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

jadx is a Dex to Java decompiler. From 1.5.2 to 1.5.5, a malicious .xapk file can cause jadx to write attacker-controlle

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From

Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is c

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but

Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable val

Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerc

Twig is a template language for PHP. Prior to 3.27.0, deprecated internal wrappers in src/Resources/core.php do not forw

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file syst

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in t

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclo

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execut

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the c

Twig is a template language for PHP. Prior to 3.26.0, several Twig language constructs trigger PHP string coercion on a

Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplat

Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.(<string>) and import-alias dynamic attribute synta

Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles CoreExtension::g

Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% include %} can include a template that was previou

Twig is a template language for PHP. Prior to 3.26.0, several filters in twig/markdown-extra and twig/cssinliner-extra a

Twig is a template language for PHP. Prior to 3.26.0, the column filter passes object arrays to PHP array_column(), whic

Twig is a template language for PHP. From 3.9.0 until 3.26.0, template_from_string() compiles an inner template under a

Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quotes when a template n

Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFormatter ins

Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, ca

Twig is a template language for PHP. Prior to 3.26.0, the Twig sandbox does not prevent a template from consuming CPU, m

ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and 3.2.0, JWT.decode(t

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest int

An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name

HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful syste

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of t

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Lev

Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From

The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files an

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via