Autor: Peter Leibling

CVE-2026-33937 Handlebars.js has JavaScript Injection via AST Type Confusion

Information published.

CVE-2026-33896 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

Information published.

CVE-2026-33939 Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation

Information published.

CVE-2026-33895 Forge has signature forgery in Ed25519 due to missing S > L check

Information published.

CVE-2026-33941 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options

Information published.

CVE-2026-33891 Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

Information published.

CVE-2026-33938 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

Information published.

Chromium: CVE-2026-4676 Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

Angreifer knacken Gambio-Webshops – Updates verfügbar

Eine Sicherheitslücke in Gambio-Webshops ermöglicht Angreifern, diese zu knacken. Und das machen bösartige Akteure offenbar bereits.

Apple: Lockdown Mode beim iPhone „noch nie“ gehackt

Derzeit läuft eine Angriffswelle auf Geräte mit älteren iOS-Versionen. Apple äußerte sich im Zusammenhang damit zur Wirksamkeit einer Sicherheitsfunktion.

©  2026 Leibling.de. Erstellt mit WordPress und dem Highlight Theme