Covers the same productSerialize JavaScript: Cross-site scripting (XSS) via unescapedOct 29, 2026 at 1:09 AM UTCCVE-2026-115897
Covers the same productadm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent NamesOct 29, 2026 at 1:09 AM UTCCVE-2026-116137
More from this vendoryasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c.Oct 29, 2026 at 1:43 AM UTCCVE-2023-29580
More from this vendoryasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.Oct 29, 2026 at 1:43 AM UTCCVE-2023-31974
More from this vendoryasm v1.3.0 was discovered to contain a use after free via the function pp_getline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.Oct 29, 2026 at 1:43 AM UTCCVE-2023-31972
More from this vendorfirmware: arm_scmi: Validate SENSOR_UPDATE payload sizeOct 29, 2026 at 1:43 AM UTCCVE-2026-98893