Skip to content
OpenAdvisories
High WID-SEC-2026-0752 9 CVEs

IBM SPSS: Mehrere Schwachstellen

Published Mar 16, 2026 · Updated Jun 7, 2026 · Revision 7 · de-DE

Vendor: IBM Vendor: Red Hat Vendor: SUSE Product: App Connect Enterprise Product: Enterprise Linux Product: Linux Product: SPSS Product: Storage Scale Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM SPSS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu manipulieren.

Product

IBM SPSS ist ein umfassendes Set von Daten- und prognostischen Analyse-Tools für Geschäftsbenutzer, Analysten und Statistik-Programmierer.

Vulnerabilities 9

  • High 8.7
    CVE-2026-26996

    minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern

    minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed…

    isaacs minimatch langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm
  • High 8.2
    CVE-2026-21884

    React Router SSR XSS in ScrollRestoration

    React Router is a router for React. In @remix-run/react version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, a XSS vulnerability exists in in React Router's <ScrollRestoration> API in Framework Mode when using the getKey/storageKey props during Ser…

    remix-run react-router react-router @remix-run/react npm
  • High 8.0
    CVE-2026-22029

    React Router vulnerable to XSS via Open Redirects

    React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unsta…

    remix-run react-router @remix-run/router react-router npm
  • High 7.6
    CVE-2025-59057 Public exploit

    React Router has XSS Vulnerability

    React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's meta()/<Meta> APIs in Framework Mode when generating script:ld+json tags whi…

    remix-run react-router react-router @remix-run/react npm
  • High 7.5
    CVE-2026-27903

    minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments

    minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern co…

    isaacs minimatch katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi npm
  • High 7.5
    CVE-2026-27904

    minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

    minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g.…

    isaacs minimatch katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  • Medium 6.5
    CVE-2025-68470

    React Router has unexpected external redirect via untrusted paths

    React Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so that when a React Router application navigates to it via navigate(), <Link>, or redirect(), the app performs a navigation…

    remix-run react-router react-router npm
  • Medium 6.5
    CVE-2026-22030

    React Router has CSRF issue in Action/Server Action Request Processing

    React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router (or Remix v2) is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route actio…

    remix-run react-router react-router @remix-run/server-runtime npm
  • Medium 5.3
    CVE-2025-64718

    js-yaml has prototype pollution in merge (<<)

    js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (`__proto__`). All users who parse untrusted yaml documen…

    nodeca js-yaml katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm

Revision history

  1. #7

    Neue Updates von IBM aufgenommen

  2. #6

    Neue Updates von Red Hat aufgenommen

  3. #5

    Neue Updates von IBM aufgenommen

  4. #4

    Neue Updates von SUSE aufgenommen

  5. #3

    Neue Updates von Red Hat aufgenommen

  6. #2

    Neue Updates von IBM aufgenommen

  7. #1

    Initiale Fassung

References