Race condition, use-after-free in the Graphics: WebRender component. This vulnerability affects Firefox < 149, Firefox ESR < 115.34, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9. More information : https://bugzilla.mozilla.org/show_bug.cgi?id=2011129

Langflow is a tool for building and deploying AI-powered agents and workflows. An unauthenticated remote shell injection vulnerability exists in multiple GitHub Actions workflows in the Langflow repository prior to version 1.9.0. Unsanitized interpolation...

Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 (External Control of File Name), leading to the root architectural...

Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new message ( CVE-2026-27446 https://www.cve.org/CVERecord ). Since KNIME Business Hub...

An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition. More information...

Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn’t exist with an authenticated...

Out-of-bounds Write vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. More information : https://github.com/MolotovCherry/Android-ImageMagick7/pull/194

CWE-20 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. More information : https://github.com/MolotovCherry/Android-ImageMagick7/pull/193

CWE-79 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. More information : https://github.com/MolotovCherry/Android-ImageMagick7/pull/192

Missing Release of Memory after Effective Lifetime vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11. More information : https://github.com/MolotovCherry/Android-ImageMagick7/pull/191

Out-of-bounds Read vulnerability in slajerek RetroDebugger.This issue affects RetroDebugger: before v0.64.72. More information : https://github.com/slajerek/RetroDebugger/pull/97

Use After Free vulnerability in No-Chicken Echo-Mate.This issue affects Echo-Mate: before V250329. More information : https://github.com/No-Chicken/Echo-Mate/pull/5

NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0. More information : https://github.com/tmate-io/tmate/pull/328

Out-of-bounds Read vulnerability in fabiangreffrath woof.This issue affects woof: before woof_15.3.0. More information : https://github.com/fabiangreffrath/woof/pull/2521