Nodemailer apps passing user-influenced addresses can be tricked into mailing attacker-chosen recipients, bypassing allow lists: CVE-2026-121424 nested comments end early, turning comment text into a recipient; CVE-2026-121425 groups end at a semicolon inside quotes or comments; CVE-2026-121426 angle addresses end at a bracket inside quoted parts, delivering to an unnamed domain. Upgrade to 10.1.4 to mitigate.

Affects rsync `

XXE in Apache Tika org.apache.tika:tika-parser-pdf-module lets attackers inject external entities via a crafted XFA inside a PDF, enabling sensitive file/data reads and outbound requests to internal/third-party hosts (SSRF). Affects Apache Tika 1.13 through 3.2.1 (incl.), including dependents like tika-app and tika-server-standard. Upgrade to 3.2.2 to mitigate.

libkcapi one-shot AIO path may return an error before all submitted IOCBs are drained, leaving in-flight AIO so the kernel later writes into caller-owned output buffers, causing memory corruption and potential crash/data exposure. Affects libkcapi >=0.12.0 and `

Beta9 tenants with a workspace token can escape sandbox boundaries: CVE-2026-120306 uses Buildah BUILDAH_ISOLATION=chroot RUN steps to keep worker namespaces and access /proc/1/root; CVE-2026-120307 path traversal/symlink via sandbox file API reads/writes worker FS; CVE-2026-120308 volume identifier traversal mounts arbitrary host paths. Upgrade to worker 0.1.756 and gateway 0.1.776 to mitigate.

Netpbm image parsing flaws allow memory corruption via crafted files. Affects Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08; CVE-2026-120432/120433 are integer overflows and CVE-2026-120433/120436 include stack-based overflow conditions. Exploitation can crash tools and may enable code execution. Upgrade to 10.86.51/ 11.02.30/ 11.15.08 to mitigate.