SECURITY ANNOUNCEMENT

CVE-2026-99068

23 October 2026

time dao_clear_input() is called. Store the base pointer of the allocation before clearing the mapper entries and free the array after removing entries from the list.

Introduced

6.14e576e7843c0d65b82d4092e5b386d9fbf5bc10c3

Fixed releases

6.18.57f7dc71c1ce885f5d9f128037ebc75d9c0356e060

7.2.110919d8dd19f92e12829055c75fced9a454d644bf

7.3593d46fc6af9a0178a46e77d6d24b20d2314165f

View source announcement ↗