Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, HTTP request smuggling, privilege escalation, a side channel attack against PKCS#1 1.5 or a bypass of network import restrictions.
Comment
Archive for August 29th, 2025
5 results.
Several security issues were fixed in Python.
A flaw was found in libxslt, the XSLT 1.0 processing library, where the attribute type, atype, flags are modified in a way that corrupts internal memory management. This is addressed by adding guards in libxml2, the GNOME XML library, preventing the heap use-after-free from happening.
Several security issues were fixed in OpenLDAP.
Updated to 139.0.7258.138 CVE-2025-9132: Out of bounds write in V8