CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
libmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 moreMIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters7.5 Highlibmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 moreMIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message7.5 Highlibmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 moreMIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous5.3 Mediumlibmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 moreMIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations5.3 Medium- dalibo postgresql anonymizerPostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking4.3 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data4.3 Medium
libmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 moreMIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary5.3 Medium- dalibo postgresql anonymizerPostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data6.5 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query6.5 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views4.8 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent5.7 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule5.7 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting5.7 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats3.5 Low
- dalibo postgresql anonymizerPostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()4.7 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions4.7 Medium
- dalibo postgresql anonymizerPostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles3.5 Low
- highcharts, @highcharts grid-lite, grid-pro +2 moreHighcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`8.5 High
- red hat jboss enterprise application platform 7.4, jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4 els on rhel 8 +2 more +4 moreOpenjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap8.1 High
- highcharts, @highcharts dashboards, grid-pro +2 moreHighcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`8.5 High
- drupal fasttoggleFasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-2836.5 Medium
- drupal fasttoggleFasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-2825.4 Medium
- drupal captchaCAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-2817.3 High
- highchartsHighcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts7.2 High
- drupal payumoney for drupal commercePayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-2776.6 Medium
- drupal cacheflushCacheFlush - Critical - Unsupported - SA-CONTRIB-2026-2766.6 Medium
- drupal single content syncSingle Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-2757.2 High
- klei entertainment don't starve togetherDon't Starve Together Memory Corruption via world_gen_data6.9 Medium
- drupal single content syncSingle Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-2747.2 High
libhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies7.5 Highlibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload7.5 Highlibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk9.1 Criticallibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies7.5 Highlibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them9.8 Criticallibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block7.5 Highlibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary7.5 Highlibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk7.1 Highlibhttp-body-perlDebian,perl-HTTP-BodyopenSUSE +1 moreHTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts6.5 Medium- le0pard re2jsRE2JS: Quadratic-time denial of service in re2js lookbehind matching7.5 High
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-2735.5 Medium
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-2726.5 Medium
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-2713.1 Low
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-2705.9 Medium
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-2697.1 High
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-2683.7 Low
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-2676.5 Medium
- drupal ai (artificial intelligence)AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-2666.5 Medium
- eugeny russhrussh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation8.3 High
- zephyrproject zephyrOut-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet6.5 Medium
- zephyrproject zephyrUnvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode7.8 High
- Show moreLoading…