https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-31971.htmlhttps://patchthecve.com/cve/CVE-2026-31971.htmlWed, 17 Jun 2026 10:34:52 +0000HIGH 8.1: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the `BYTE_ARRAY_LEN` method, the `cram_byte_array_len_decode()` failed thttps://patchthecve.com/cve/CVE-2026-31970.htmlhttps://patchthecve.com/cve/CVE-2026-31970.htmlWed, 17 Jun 2026 10:34:51 +0000HIGH 8.1: HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP [BGZF] files. In the GZI loading function, `bgzf_index_load_hfile()`, it was possible to trigger an integer overflow, leading to an under- or zero-sized buffer being allocated https://patchthecve.com/cve/CVE-2026-31969.htmlhttps://patchthecve.com/cve/CVE-2026-31969.htmlWed, 17 Jun 2026 10:34:51 +0000HIGH 8.1: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the `BYTE_ARRAY_STOP` method, an out-by-one error in the `cram_byte_arrhttps://patchthecve.com/cve/CVE-2026-31968.htmlhttps://patchthecve.com/cve/CVE-2026-31968.htmlWed, 17 Jun 2026 10:34:51 +0000HIGH 8.1: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. For the `VARINT` and `CONST` encodings, incomplete validation of the context in which the encodings werehttps://patchthecve.com/cve/CVE-2026-31967.htmlhttps://patchthecve.com/cve/CVE-2026-31967.htmlWed, 17 Jun 2026 10:34:51 +0000CRITICAL 9.1: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_decode_slice()` function called while reading CRAM records, the value of the mate reference id field was not validated. Later use of this value,https://patchthecve.com/cve/CVE-2026-31966.htmlhttps://patchthecve.com/cve/CVE-2026-31966.htmlWed, 17 Jun 2026 10:34:51 +0000CRITICAL 9.1: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of removing redundant data, CRAM uses reference-based compression so that instead of storing the full sequence for each alignment record it stohttps://patchthecve.com/cve/CVE-2026-31965.htmlhttps://patchthecve.com/cve/CVE-2026-31965.htmlWed, 17 Jun 2026 10:34:51 +0000HIGH 8.2: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the `cram_decode_slice()` function called while reading CRAM records, validation of the reference id field occurred too late, allowing two out of bounds rhttps://patchthecve.com/cve/CVE-2026-31964.htmlhttps://patchthecve.com/cve/CVE-2026-31964.htmlWed, 17 Jun 2026 10:34:51 +0000HIGH 7.5: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. While most alignment records store DNA sequence and quality values, the format also allows them to omithttps://patchthecve.com/cve/CVE-2026-31963.htmlhttps://patchthecve.com/cve/CVE-2026-31963.htmlWed, 17 Jun 2026 10:34:51 +0000HIGH 8.1: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of removing redundant data, CRAM uses reference-based compression so that instead of storing the full sequence for each alignment record it stohttps://patchthecve.com/cve/CVE-2026-31962.htmlhttps://patchthecve.com/cve/CVE-2026-31962.htmlWed, 17 Jun 2026 10:34:50 +0000HIGH 8.8: HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. While most alignment records store DNA sequence and quality values, the format also allows them to omit this data in certain cases to save space. Due to some