4943 matches found
GHSA-X4VX-RJVF-J5P4 vulnerabilities
Vulnerabilities for packages: langfuse, nextcloud-server...
CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2
CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...
GHSA-JQ35-7PRP-9V3F vulnerabilities
Vulnerabilities for packages: datadog-agent, ggshield, superset, kserve...
GHSA-5XF4-F2FQ-F69J vulnerabilities
Vulnerabilities for packages: yarn...
CVE-2026-22018 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-5CCW-23GM-2H2F vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-HPM9-74QX-6X32 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-HMW2-7CC7-3QXX vulnerabilities
Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards, kubeflow-centraldashboard, lerna, jitsucom-jitsu, langfuse, prism, saf, tileserver-gl, kubeflow-pipelines, argo-workflows, nextcloud-server, sqlpad...
CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
CVE-2026-9679
Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 §5.4 does not specify any decoding and browsers do not decode either. Applications that parse a...
CVE-2026-9697
Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI socks5:// or socks://. The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default trust store, ignoring user-configured ca, cert, key, rejectUnauthorized, and servernam...
firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...
firefox: Sandbox escape due to use-after-free in the Disability Access APIs component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...
GHSA-R47G-FVHR-H676 vulnerabilities
Vulnerabilities for packages: langfuse-fips, librechat, nextcloud-server, wazuh-dashboard-fips, langfuse, kibana, wazuh-dashboard...
firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, integer overflow in the Audio/Video component...
GHSA-5RVQ-CXJ2-64VF vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, airflow-core, wazuh-manager, airflow, litellm, wazuh-manager-fips...
GHSA-R7G4-QG5F-QQM2 vulnerabilities
Vulnerabilities for packages: kibana, langfuse, unleash, langfuse-fips...
GHSA-G3CQ-J2XW-WF74 vulnerabilities
Vulnerabilities for packages: open-webui, mlflow...