Skip to content

Commit 2343826

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-8jj6-9qc9-r5x4 GHSA-g5rv-h647-hjj3 GHSA-jc4q-h995-9f9w GHSA-wmgp-r59p-x29f
1 parent b07e6a1 commit 2343826

4 files changed

Lines changed: 224 additions & 0 deletions

File tree

‎advisories/unreviewed/2026/01/GHSA-8jj6-9qc9-r5x4/GHSA-8jj6-9qc9-r5x4.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8jj6-9qc9-r5x4",
4+
"modified": "2026-01-18T06:30:22Z",
5+
"published": "2026-01-18T06:30:22Z",
6+
"aliases": [
7+
"CVE-2026-1110"
8+
],
9+
"details": "A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. This affects the function rtsp_parse_method. This manipulation causes buffer overflow. It is possible to launch the attack on the local host. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1110"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_parse_method/librtsp_rtsp_parse_method.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.341702"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.341702"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.732603"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-119"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-01-18T05:16:19Z"
51+
}
52+
}

‎advisories/unreviewed/2026/01/GHSA-g5rv-h647-hjj3/GHSA-g5rv-h647-hjj3.json‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-g5rv-h647-hjj3",
4+
"modified": "2026-01-18T06:30:22Z",
5+
"published": "2026-01-18T06:30:22Z",
6+
"aliases": [
7+
"CVE-2025-15533"
8+
],
9+
"details": "A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageFontAtlas of the file src/rtext.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called 5a3391fdce046bc5473e52afbd835dd2dc127146. Applying a patch is advised to resolve this issue.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15533"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/raysan5/raylib/issues/5433"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/raysan5/raylib/pull/5450"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/raysan5/raylib/commit/5a3391fdce046bc5473e52afbd835dd2dc127146"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://github.com/oneafter/1224/blob/main/hbf2"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?ctiid.341705"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?id.341705"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/?submit.733341"
53+
},
54+
{
55+
"type": "WEB",
56+
"url": "https://vuldb.com/?submit.733342"
57+
}
58+
],
59+
"database_specific": {
60+
"cwe_ids": [
61+
"CWE-119"
62+
],
63+
"severity": "MODERATE",
64+
"github_reviewed": false,
65+
"github_reviewed_at": null,
66+
"nvd_published_at": "2026-01-18T05:16:16Z"
67+
}
68+
}

‎advisories/unreviewed/2026/01/GHSA-jc4q-h995-9f9w/GHSA-jc4q-h995-9f9w.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-jc4q-h995-9f9w",
4+
"modified": "2026-01-18T06:30:23Z",
5+
"published": "2026-01-18T06:30:23Z",
6+
"aliases": [
7+
"CVE-2026-1111"
8+
],
9+
"details": "A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplateAdminController.java of the component Task Template Management Handler. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1111"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/AnalogyC0de/public_exp/issues/2"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.341703"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.341703"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.732726"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-22"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-01-18T06:16:01Z"
51+
}
52+
}

‎advisories/unreviewed/2026/01/GHSA-wmgp-r59p-x29f/GHSA-wmgp-r59p-x29f.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-wmgp-r59p-x29f",
4+
"modified": "2026-01-18T06:30:22Z",
5+
"published": "2026-01-18T06:30:22Z",
6+
"aliases": [
7+
"CVE-2026-1109"
8+
],
9+
"details": "A vulnerability was detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The impacted element is the function rtsp_parse_request. The manipulation results in buffer overflow. Attacking locally is a requirement. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1109"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/fizz-is-on-the-way/vuls_protocol/blob/main/librtsp_rtsp_parse_request/librtsp_rtsp_parse_request.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.341701"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.341701"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.732599"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-119"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-01-18T04:15:59Z"
51+
}
52+
}

0 commit comments

Comments
 (0)