Posted by Sam James on Sep 28 From https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49 """ This is a security-only release, to address GHSA-r9hj-j2rw-4q3m. Compared to 10.48, this release has only a minimal code change to prevent an out-of-bounds write with arbitrary data. An attacker-controlled regular expression is required.
JIT buffer overflow fixed in libpcre2-10.49
About this summary. This is a short, independently written summary of an article first published by oss-security. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q3/975
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
JadePuffer crims hijacked Azure identities and used them to blow up cloud resources
The cyber criminal behind JadePuffer, the first known agentic ransomware infection reported over the summer, has also used stolen Azure identities to conduct destructive…
VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Overview Authlib (versions up to and including 1.7.2) contain a signature‑verification bypass in the JSON Web Signature (JWS) general JSON serialization handling. The…
How we found 24 Android vulnerabilities using our open source AI security agent
With the rise of AI in the security space, our team created the GitHub Security Lab Taskflow Agent as a way for security researchers to easily automate, package, and…
Next.js applications, powered by Vite: introducing Vinext 1.0
When we launched Vinext in February, it was the result of an audacious week-long AI-driven experiment to see how far one engineer, and a stack of tokens, could get to…
Flatpak 1.18.4 fixes multiple security vulnerabilities
Posted by Simon McVittie on Sep 28 Flatpak 1.18.4 fixes several security vulnerabilties. All older releases should be assumed to be vulnerable. For more details please…
GitHub Engagement Signals for CVE Prioritization: The GitHub Popularity Metric (GPM)
arXiv:2609.31004v1 Announce Type: new Abstract: Attackers can compromise multiple systems with a single vulnerability, while defenders need to fix all security…