CVEs
Browse the synced catalog, newest first.
- CVE-2026-124422SunEditor 3.0.0 before 3.4.0 Stored XSS via html.clean() Iframe Placeholderjihong88 suneditor
- CVE-2026-123616imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loaderimgproxy · github.com/imgproxy/imgproxy +3
- CVE-2026-123615imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loaderimgproxy · github.com/imgproxy/imgproxy +3
- CVE-2026-123614imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflowimgproxy · github.com/imgproxy/imgproxy/v3 +3
- CVE-2026-123613Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypassrustls
- CVE-2026-123612rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosurerustls
- CVE-2026-123611rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHellorustls
- CVE-2026-123610rustls before 0.23.46 Denial of Service via Brotli Certificate Decompressionrustls
- CVE-2026-123609Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debugrustls
- CVE-2026-123608Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compressionhickory-dns · hickory-proto
- CVE-2026-123607Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Servicehickory-dns · hickory-net +1
- CVE-2026-123606Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplificationhickory-dns
- CVE-2026-123605Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Namehickory-dns
- CVE-2026-123604Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loophickory-dns · hickory-resolver
- CVE-2026-123603Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypasshickory-dns
- CVE-2026-123602Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Cachinghickory-dns
- CVE-2026-123601Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgeryhickory-dns
- CVE-2026-123600Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypasshickory-dns
- CVE-2026-123599Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Recordshickory-dns
- CVE-2026-123598Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoninghickory-dns
- CVE-2026-123597Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errorshickory-dns
- CVE-2026-123596Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEChickory-dns
- CVE-2026-123595Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3hickory-dns
- CVE-2026-123594Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminalshickory-dns
- CVE-2026-123593Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchorshickory-dns
- CVE-2026-123592Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collisionhickory-dns
- CVE-2026-123591Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checkshickory-dns
- CVE-2026-123590Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validationhickory-dns
- CVE-2026-123589Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeouthickory-dns
- CVE-2026-123588Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Poolhickory-dns