CVE-2026-53495
containerd CRI ExecSync goroutine leak denial of service. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, the drainExecSyncIO goroutine can block indefinitely when long-lived child processes retain stdin/stdout pipes.
@yogsec.bsky.social
@yogsec.bsky.socialCVE-2026-53495
containerd CRI ExecSync goroutine leak denial of service. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, the drainExecSyncIO goroutine can block indefinitely when long-lived child processes retain stdin/stdout pipes.
@thedailytechfeed.comNext.js have urgent RCE and DoS flaws in cache, SVG & Server Actions—upgrade now. #Nextjs #WebSecurity #RCE #DenialOfService #Nodejs #CriticalVulnerability https://thedailytechfeed.com/critical-next-js-flaws-expose-sites-to-remote-code-execution/
@securityonline.bsky.socialMongoDB fixed 24 MongoDB Server vulnerabilities, including a critical auth bypass (CVE-2026-82067) and unauthenticated denial of service flaws. Patch now.
#MongoDB #Vulnerability #CVE #DatabaseSecurity #DenialOfService #InfoSec #PatchNow #CyberSecurity #MongoDBServer #AppSec