security

A newly disclosed vulnerability in the widely used Python tool virtualenv exposes a classic Time-of-Check–Time-of-Use (TOCTOU) race condition that can be abused by local attackers to perform symlink-based redirection of directory creation and lock-file operations. The issue — tracked as...

Oracle’s MySQL Server was assigned CVE-2024-20981 — a denial-of-service weakness in the Server: DDL component that can be triggered by a high-privilege account with network access to repeatedly hang or crash the mysqld process, producing a complete or sustained loss of availability for affected...

Webpack’s magic comments are small developer conveniences that quietly changed how bundles are named and fetched — but a subtle parsing bug in Webpack 5’s ImportParserPlugin turned those conveniences into a serious attack surface, allowing a crafted untrusted object to reach across JavaScript...

A newly published vulnerability in GnuTLS — tracked as CVE-2025-6395 — allows a remote attacker to trigger a NULL pointer dereference in the library’s _gnutls_figure_common_ciphersuite() routine, producing memory corruption and reliable denial‑of‑service (DoS) outcomes for processes that parse...

A denial-of-service weakness in the MySQL Server’s InnoDB/optimizer paths lets a high‑privileged, network‑connected actor repeatedly hang or crash the server process, causing sustained or persistent loss of availability for affected MySQL installations. Background / Overview MySQL remains a...

A subtle lapse in compiler bookkeeping has left mruby — the lightweight, embeddable Ruby implementation used widely in embedded systems and constrained environments — exposed to a heap-based buffer overflow in its code generator: CVE-2025-7207 affects the nregs handler in...

A specially crafted Helm chart archive can expand into an enormous decompressed payload that exhausts available memory and kills the Helm process — a denial‑of‑service vector tracked as CVE‑2025‑32386 — and while Microsoft’s update guide currently names Azure Linux as a product that “includes...

A heap‑based buffer overflow in the widely used giflib library — tracked as CVE‑2025‑31344 — has been publicly disclosed and fixed upstream after reports that the gif2rgb utility can be made to write past an allocated heap buffer when presented with a specially crafted GIF, creating crash and...

A deceptively small design choice in Keras’s model serialization has become a meaningful security crack in the AI supply chain: malicious .keras model archives can direct a victim’s Python process to read arbitrary files or fetch attacker-controlled network resources during model load, bypassing...

The promhttp vulnerability tracked as CVE-2022-21698 exposed a surprising — yet instructive — weakness at the intersection of observability and availability: by allowing unbounded metric label values to be created from unvalidated HTTP methods, the Prometheus Go client library (client_golang)...

The Go standard library’s math/big package contained a subtle but dangerous bug in the Rat.SetString function that could be triggered by crafted input to force unbounded memory growth and crash services that parse or accept user-controlled rational numbers. The flaw — tracked as CVE-2022-23772 —...

The llhttp parser bug tracked as CVE-2023-30589 remains an important cautionary case for WindowsForum readers: Microsoft’s Security Response Center (MSRC) has publicly mapped the vulnerable open‑source component to Azure Linux, but that mapping is an inventory attestation — not a categorical...

HAProxy operators should treat CVE-2024-45506 as an urgent availability risk: a logic flaw in the HTTP/2 zero‑copy forwarding path (the h2_send loop) can be triggered remotely to put HAProxy processes into an endless loop or crash them outright, and this weakness was observed being exploited in...

PostCSS versions prior to 8.4.31 contain a subtle but consequential parsing bug (tracked as CVE-2023-44270) that can let attacker-supplied CSS hide live rules and properties inside what appears to be a comment — a behavior that undermines linters and other tools that rely on PostCSS to safely...

A subtle change to glibc’s DNS stub resolver has had consequences that administrators and application developers should treat as more than an academic footnote: CVE-2023-4527 is a stack read overflow in getaddrinfo that can be triggered when the resolver is run in no-aaaa mode and a DNS response...

A newly disclosed vulnerability in Node.js — tracked as CVE-2024-22025 — allows an attacker who controls a URL passed into the built-in fetch() implementation to cause a Denial of Service (DoS) by driving the process into resource exhaustion through Brotli decompression. In practical terms...

Pygments’ long-running role as Python’s go-to syntax highlighter collided with a classic but under-appreciated risk in March 2021: several lexer regular expressions exhibited exponential or cubic worst‑case complexity, allowing crafted input to trigger a Regular Expression Denial of Service...

The discovery that LLVM’s ARM backend could generate code that overwrites the Link Register (LR) without saving it to the stack — tracked as CVE‑2024‑31852 — is a sober reminder that compiler toolchains can introduce subtle, hard‑to‑detect integrity failures into otherwise secure software, and...

Binutils’ objdump shipped a subtle but dangerous bug in its symbol-comparison routine that could be triggered by crafted object files to crash the tool and, in many real-world setups, take down services that rely on automated binary analysis. Background / Overview The vulnerability tracked as...

In 2014 the Python packaging tool pip was quietly found to contain a surprisingly low-tech, high-impact local denial‑of‑service (DoS) bug: pip versions 1.3 through 1.5.6 would create build directories in a predictable location under /tmp using a fixed prefix, allowing an unprivileged local user...