CWE-115

Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation

jelmer · dulwich

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.

Huawei · HarmonyOS

pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier

pgadmin.org · pgAdmin 4

HPE NonStop DNS 9.2.3 Non Secure Version

Hewlett Packard Enterprise · HPE NonStop DNS 9.2.3 Non Secure Version

OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup…

OpenVPN · OpenVPN

pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)

pgadmin.org · pgAdmin 4

pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045)

pgadmin.org · pgAdmin 4

EDNS options smuggling

PowerDNS · DNSdist

Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations

vllm-project · vLLM

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

altcha-org · altcha-lib