NIXPKGS-2026-1790

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-10028

4.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 2 days ago
• @LeSuisse accepted 2 weeks, 1 day ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain

• https://access.redhat.com/security/cve/CVE-2026-10028 x_refsource_REDHATvdb-entry
• RHBZ#2465152 issue-trackingx_refsource_REDHAT
• https://gitlab.gnome.org/GNOME/glib-networking/-/work_items/231

---

glib-networking

NIXPKGS-2026-1789

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-48523

5.4 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): None (N)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 2 days ago
• @LeSuisse accepted 2 weeks, 1 day ago
• @LeSuisse published on GitHub 1 week, 6 days ago

PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` / `PyJWKClient` keys

• https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jq35-7prp-9v3f x_refsource_CONFIRMexploit

---

pyjwt

• ==>= 2.9.0, < 2.13.0

NIXPKGS-2026-1788

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-42250

5.1 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks, 2 days ago
• @LeSuisse ignored
  18 packages

  • lbzip2
  • pbzip2
  • bzip2_1_1
  • indexed-bzip2
  • minimal-bootstrap.bzip2
  • haskellPackages.bzip2-clib
  • perlPackages.CompressBzip2
  • perl5Packages.CompressBzip2
  • perl538Packages.CompressBzip2
  • perl540Packages.CompressBzip2
  • perlPackages.CompressRawBzip2
  • minimal-bootstrap.bzip2-static
  • perl5Packages.CompressRawBzip2
  • python312Packages.indexed-bzip2
  • python313Packages.indexed-bzip2
  • python314Packages.indexed-bzip2
  • perl538Packages.CompressRawBzip2
  • perl540Packages.CompressRawBzip2
  2 weeks, 1 day ago
• @LeSuisse restored package bzip2_1_1 2 weeks, 1 day ago
• @LeSuisse accepted 2 weeks, 1 day ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Off-by-One Leading to Out-of-Bounds Write in bzip2

• https://cert.pl/en/posts/2026/05/CVE-2026-42250/ third-party-advisory
• https://sourceware.org/bzip2/ product
• https://inbox.sourceware.org/bzip2-devel/20260528145407.293768-1-mark@klomp.org/ vendor-advisory
• https://sourceware.org/cgit/bzip2/commit/?id=35d122a3df8b0cc4082a4d89fdc6ee99f3… patch

---

bzip2

• ==35d122a3df8b0cc4082a4d89fdc6ee99f375fe67
• =<1.0.8

NIXPKGS-2026-1787

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-10117

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks ago
• @LeSuisse ignored
  3 references

  • VDB-367295 | CTI Indicators (IOB, IOC, …
  • Submit #818586 | Open5GS NRF/UDM/UDR/NS…
  • https://github.com/open5gs/open5gs/
  1 week, 6 days ago
• @LeSuisse ignored package open5gs-webui 1 week, 6 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service

• VDB-367295 | Open5GS nghttp2-server.c ogs_pool_id_calloc denial of service technical-descriptionvdb-entry
• https://github.com/open5gs/open5gs/issues/4474 issue-trackingexploit

Ignored references (3)

• VDB-367295 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #818586 | Open5GS NRF/UDM/UDR/NSSF/BSF/PCF/AMF/AUSF/SMF v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.1
• ==2.7.4
• ==2.7.7
• ==2.7.0
• ==2.7.3
• ==2.7.5
• ==2.7.6
• ==2.7.2

NIXPKGS-2026-1786

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-10156

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks ago
• @LeSuisse ignored package open5gs-webui 1 week, 6 days ago
• @LeSuisse ignored
  3 references

  • https://github.com/open5gs/open5gs/
  • Submit #818598 | Open5GS NRF v2.7.7 Den…
  • VDB-367409 | CTI Indicators (IOB, IOC, …
  1 week, 6 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption

• VDB-367409 | Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption technical-descriptionvdb-entry
• https://github.com/open5gs/open5gs/issues/4480 issue-trackingexploit

Ignored references (3)

• VDB-367409 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #818598 | Open5GS NRF v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.1
• ==2.7.4
• ==2.7.7
• ==2.7.0
• ==2.7.3
• ==2.7.5
• ==2.7.6
• ==2.7.2

NIXPKGS-2026-1785

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-10115

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks ago
• @LeSuisse ignored
  3 references

  • https://github.com/open5gs/open5gs/
  • Submit #818583 | Open5GS NRF、AMF、AUSF、B…
  • VDB-367293 | CTI Indicators (IOB, IOC, …
  1 week, 6 days ago
• @LeSuisse ignored package open5gs-webui 1 week, 6 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Open5GS Shared NF-profile nnrf-handler.c denial of service

• VDB-367293 | Open5GS Shared NF-profile nnrf-handler.c denial of service vdb-entry
• https://github.com/open5gs/open5gs/issues/4469 issue-trackingexploit
• https://github.com/open5gs/open5gs/issues/4469#issuecomment-4389805398 issue-tracking
• https://github.com/open5gs/open5gs/pull/4527 issue-trackingpatch

Ignored references (3)

• VDB-367293 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #818583 | Open5GS NRF、AMF、AUSF、BSF、NSSF、PCF、SMF、UDM、UDR v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.1
• ==2.7.7
• ==2.7.4
• ==2.7.0
• ==2.7.3
• ==2.7.5
• ==2.7.6
• ==2.7.2

NIXPKGS-2026-1784

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-10113

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks ago
• @LeSuisse ignored
  3 references

  • https://github.com/open5gs/open5gs/
  • Submit #818581 | Open5GS NRF/AMF/AUSF/B…
  • VDB-367291 | CTI Indicators (IOB, IOC, …
  1 week, 6 days ago
• @LeSuisse ignored package open5gs-webui 1 week, 6 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Open5GS Shared NF-profile nnrf-handler.c denial of service

• VDB-367291 | Open5GS Shared NF-profile nnrf-handler.c denial of service vdb-entry
• https://github.com/open5gs/open5gs/issues/4467 issue-trackingexploit
• https://github.com/open5gs/open5gs/pull/4527 issue-trackingpatch

Ignored references (3)

• VDB-367291 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #818581 | Open5GS NRF/AMF/AUSF/BSF/NSSF/PCF/SMF/UDM/UDR v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.1
• ==2.7.4
• ==2.7.7
• ==2.7.0
• ==2.7.3
• ==2.7.5
• ==2.7.6
• ==2.7.2

NIXPKGS-2026-1783

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-10116

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks ago
• @LeSuisse ignored
  3 references

  • https://github.com/open5gs/open5gs/
  • Submit #818585 | Open5GS AUSF v2.7.7 De…
  • VDB-367294 | CTI Indicators (IOB, IOC, …
  1 week, 6 days ago
• @LeSuisse ignored package open5gs-webui 1 week, 6 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of service

• VDB-367294 | Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact_add denial of service technical-descriptionvdb-entry
• https://github.com/open5gs/open5gs/issues/4473 issue-trackingexploit
• https://github.com/open5gs/open5gs/pull/4578 issue-trackingpatch

Ignored references (3)

• VDB-367294 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-requiredsignature
• Submit #818585 | Open5GS AUSF v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.1
• ==2.7.4
• ==2.7.7
• ==2.7.0
• ==2.7.3
• ==2.7.5
• ==2.7.6
• ==2.7.2

NIXPKGS-2026-1782

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-10114

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): Low (L)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): POC (P)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): Low (L)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks ago
• @LeSuisse ignored package open5gs-webui 1 week, 6 days ago
• @LeSuisse ignored
  3 references

  • https://github.com/open5gs/open5gs/
  • Submit #818582 | Open5GS AMF、AUSF、BSF、N…
  • VDB-367292 | CTI Indicators (IOB, IOC, …
  1 week, 6 days ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write

• VDB-367292 | Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write technical-descriptionvdb-entry
• https://github.com/open5gs/open5gs/issues/4468 issue-trackingexploit

Ignored references (3)

• VDB-367292 | CTI Indicators (IOB, IOC, IOA) permissions-requiredsignature
• Submit #818582 | Open5GS AMF、AUSF、BSF、NSSF、PCF、SMF、UDM、UDR、SCP、SEPP、NRF v2.7.7 Denial of Service third-party-advisory
• https://github.com/open5gs/open5gs/ product

---

Open5GS

• ==2.7.1
• ==2.7.4
• ==2.7.7
• ==2.7.0
• ==2.7.3
• ==2.7.5
• ==2.7.6
• ==2.7.2

NIXPKGS-2026-1781

GitHub issue published 1 week, 6 days ago

Permalink CVE-2026-8594

updated 1 week, 6 days ago by @LeSuisse Activity log

• Created suggestion 2 weeks ago
• @LeSuisse accepted 1 week, 6 days ago
• @LeSuisse published on GitHub 1 week, 6 days ago

Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters

• https://metacpan.org/release/NEZUMI/Unicode-LineBreak-2019.001/source/lib/Text/…
• https://security.metacpan.org/patches/U/Unicode-LineBreak/2019.001/CVE-2026-859… patch
• https://github.com/hatukanezumi/Unicode-LineBreak/pull/6 issue-tracking
• http://www.openwall.com/lists/oss-security/2026/05/30/6

---

Unicode-LineBreak

• =<2019.001

Patch: https://security.metacpan.org/patches/U/Unicode-LineBreak/2019.001/CVE-2026-8594-r1.patch