5641 matches found
GHSA-5XF4-F2FQ-F69J vulnerabilities
Vulnerabilities for packages: yarn...
CVE-2026-22018 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-HPM9-74QX-6X32 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-5CCW-23GM-2H2F vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-HMW2-7CC7-3QXX vulnerabilities
Vulnerabilities for packages: tileserver-gl, kubeflow-pipelines, jitsucom-jitsu, argo-workflows, opensearch-dashboards, kubeflow-centraldashboard, prism, nextcloud-server, saf, sqlpad, langfuse, kubeflow-katib, lerna...
CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
CVE-2026-9679
Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 §5.4 does not specify any decoding and browsers do not decode either. Applications that parse a...
CVE-2026-9697
Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI socks5:// or socks://. The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default trust store, ignoring user-configured ca, cert, key, rejectUnauthorized, and servernam...
firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...
firefox: Sandbox escape due to use-after-free in the Disability Access APIs component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...
GHSA-R47G-FVHR-H676 vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard, gitlab-rails-ce-fips, langfuse, kibana, wazuh-dashboard-fips, gitlab-rails-ce, nextcloud-server, langfuse-fips...
CVE-2026-12451
Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, integer overflow in the Audio/Video component...
GHSA-R7G4-QG5F-QQM2 vulnerabilities
Vulnerabilities for packages: unleash, kibana, langfuse-fips, langfuse...
GHSA-5RVQ-CXJ2-64VF vulnerabilities
Vulnerabilities for packages: wazuh-manager-fips, airflow, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, litellm, airflow-core...
GHSA-4FVR-RGM6-GQMC vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-G3CQ-J2XW-WF74 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-XCGM-R5H9-7989 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these...
