Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:14:56 +0000 bdu:2026-09562 https://vulnerability.circl.lu/vuln/bdu:2026-09562 bdu:2026-09562 https://vulnerability.circl.lu/vuln/bdu:2026-09562 CLEANSTART-2026-JQ76135 — Security fix for ghsa-8x88-c5mf-7j5w applied in: sqlpad 7.5.7-r1 https://vulnerability.circl.lu/vuln/cleanstart-2026-jq76135 <p><strong>Affected:</strong> CleanStart: sqlpad</p> <p>Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: sqlpad</p> <p>Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details.</p> https://vulnerability.circl.lu/vuln/cleanstart-2026-jq76135 CVE-2026-59874 — node-tar: Negative tar entry size causes infinite loop in archive replace https://vulnerability.circl.lu/vuln/cve-2026-59874 <p><strong>Affected:</strong> isaacs node-tar</p> <p>node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.</p> <p><strong>Affected:</strong> isaacs node-tar</p> <p>node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.</p> https://vulnerability.circl.lu/vuln/cve-2026-59874