Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
JLSEC-2026-1168
  • Julia/GCCBootstrap_jll
  • Julia/GMP_jll
  • Julia/LibStdCxx_jll
 GMP has an integer overflow with crafted inputs on 32-bit builds in `int_raw.c`, leading to buffer overflow yesterday
  • Fix available
  • Severity - 7.5 (High)
JLSEC-2026-1169
  • Julia/p7zip_jll
 7-Zip for Windows fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive yesterday
  • No fix available
  • Severity - 4.8 (Medium)
JLSEC-2026-1164
  • Julia/Deno_jll
 Deno: `fetch()` API sandbox bypass via missing DNS resolution check yesterday
  • Fix available
  • Severity - 5.2 (Medium)
JLSEC-2026-1165
  • Julia/Deno_jll
 Deno: WebSocket API sandbox bypass via missing post-DNS check yesterday
  • Fix available
  • Severity - 5.2 (Medium)
JLSEC-2026-1166
  • Julia/Deno_jll
 Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access yesterday
  • Fix available
  • Severity - 5.2 (Medium)
JLSEC-2026-1167
  • Julia/Deno_jll
 Deno: Denial of service via non-ASCII bytes in WebSocket response headers yesterday
  • Fix available
  • Severity - 4.3 (Medium)
JLSEC-2026-1162
  • Julia/HDF5_jll
 See record for full details 2 days ago
  • Fix available
  • Severity - 5.9 (Medium)
JLSEC-2026-1163
  • Julia/HDF5_jll
 See record for full details 2 days ago
  • Fix available
  • Severity - 5.9 (Medium)
JLSEC-2026-1158
  • Julia/wget_jll
 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability... 3 days ago
  • No fix available
  • Severity - 8.7 (High)
JLSEC-2026-1159
  • Julia/wget_jll
 GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in... 3 days ago
  • No fix available
  • Severity - 6.9 (Medium)
JLSEC-2026-1160
  • Julia/wget_jll
 GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability... 3 days ago
  • No fix available
  • Severity - 6.0 (Medium)
JLSEC-2026-1161
  • Julia/wget_jll
 GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability... 3 days ago
  • No fix available
  • Severity - 6.0 (Medium)
JLSEC-2026-1157
  • Julia/nghttp2_jll
 nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a... 3 days ago
  • Fix available
  • Severity - 6.3 (Medium)
JLSEC-2026-1119
  • Julia/nats_server_jll
 See record for full details 3 days ago
  • Fix available
  • Severity - 6.5 (Medium)
JLSEC-2026-1120
  • Julia/nats_server_jll
 See record for full details 3 days ago
  • Fix available
  • Severity - 7.5 (High)
JLSEC-2026-1121
  • Julia/nats_server_jll
 See record for full details 3 days ago
  • Fix available
  • Severity - 7.5 (High)
Load more...