https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T02:27:37.304064+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-09562 bdu:2026-09562 2026-10-06T02:27:37.327633+00:00 bdu:2026-09562 https://vulnerability.circl.lu/vuln/cleanstart-2026-jq76135 CLEANSTART-2026-JQ76135 — Security fix for ghsa-8x88-c5mf-7j5w applied in: sqlpad 7.5.7-r1 2026-10-06T02:27:37.327791+00:00

Affected: CleanStart: sqlpad

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details.

 https://vulnerability.circl.lu/vuln/cve-2026-59874 CVE-2026-59874 — node-tar: Negative tar entry size causes infinite loop in archive replace 2026-10-06T02:27:37.327910+00:00

Affected: isaacs node-tar

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.