DEV Community

#cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-126347: CVE-2026-126347: Open Redirect via Triple-Slash Redirect Paths in Tornado RedirectHandler

CVE-2026-126347: CVE-2026-126347: Open Redirect via Triple-Slash Redirect Paths in Tornado RedirectHandler

Comments
5 min read
Chrome Zero-Day CVE-2026-125350: Update and Check

Chrome Zero-Day CVE-2026-125350: Update and Check

Comments
7 min read
CVE-2026-126298: CVE-2026-126298: Quadratic Algorithmic Complexity Denial of Service in NLTK Tree.chomsky_normal_form

CVE-2026-126298: CVE-2026-126298: Quadratic Algorithmic Complexity Denial of Service in NLTK Tree.chomsky_normal_form

Comments
5 min read
GHSA-GPWC-27CW-RH9R: CVE-2026-126301: Quadratic CPU Exhaustion in NLTK LegalitySyllableTokenizer

GHSA-GPWC-27CW-RH9R: CVE-2026-126301: Quadratic CPU Exhaustion in NLTK LegalitySyllableTokenizer

Comments
4 min read
CVE-2026-128067: CVE-2026-128067: Out-of-Bounds Heap Read and Write in Pillow libtiff Encoder via Geometry Tag Overrides

CVE-2026-128067: CVE-2026-128067: Out-of-Bounds Heap Read and Write in Pillow libtiff Encoder via Geometry Tag Overrides

Comments
4 min read
CVE-2026-126084: CVE-2026-126084: Unsigned Content-Type in Rails Active Storage GCS Direct Uploads

CVE-2026-126084: CVE-2026-126084: Unsigned Content-Type in Rails Active Storage GCS Direct Uploads

Comments
4 min read
CVE-2026-126192: CVE-2026-126192: Quadratic Algorithmic Complexity Denial of Service in Soup Sieve CSS Selector Engine

CVE-2026-126192: CVE-2026-126192: Quadratic Algorithmic Complexity Denial of Service in Soup Sieve CSS Selector Engine

Comments
6 min read
CVE-2026-126190: CVE-2026-126190: Polynomial-Time Denial of Service in Soup Sieve CSS Descendant Combinator

CVE-2026-126190: CVE-2026-126190: Polynomial-Time Denial of Service in Soup Sieve CSS Descendant Combinator

Comments
4 min read
Node.js November 2026 Security Release: How We Tracked and Patched It

Node.js November 2026 Security Release: How We Tracked and Patched It

5
Comments
13 min read
CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell

CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell

Comments
1 min read
CVE-2026-114155: CVE-2026-114155: Local Elevation of Privilege via TOCTOU Race Condition in Microsoft .NET dotnet-watch

CVE-2026-114155: CVE-2026-114155: Local Elevation of Privilege via TOCTOU Race Condition in Microsoft .NET dotnet-watch

Comments
4 min read
CVE-2026-109478: CVE-2026-109478: Algorithmic Complexity Denial of Service in ASP.NET Core Header Parsing

CVE-2026-109478: CVE-2026-109478: Algorithmic Complexity Denial of Service in ASP.NET Core Header Parsing

Comments
4 min read
CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane

CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane

Comments
4 min read
CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport

CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport

Comments
5 min read
PHP2Shell on PHP 8: docker build --pull succeeded and PHP is still 8.2.29

PHP2Shell on PHP 8: docker build --pull succeeded and PHP is still 8.2.29

Comments
14 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.