200978 matches found
CVE-2026-107363
In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token. An authenticated user with a valid token for one project may substitute another project's UUID to enumerate, inspect, create, o...
CVE-2026-1403
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file...
CVE-2026-107280
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, ThreadSafeCookieStore validates Domain attributes with domain matching but does not reject public suffixes. A host beneath a suffix such ...
CVE-2026-107279
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In 3.0.12, a peer offering only Digest qop=auth-int causes mutual-authentication verification to be skipped. AuthenticatorUtils.computeExpectedRspAuth returns no...
google.golang.org/protobuf: golang-protobuf: Denial of Service via infinite loop when unmarshaling invalid JSON
A flaw was found in golang-protobuf. The protojson unmarshaling function can enter an infinite loop when parsing certain invalid JSON inputs, specifically when decoding messages containing Any values or when configured to discard unknown fields. A remote attacker can exploit this vulnerability by...
GHSA-G2V6-RQMX-R4W6 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, langfuse-fips, langfuse, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, nextcloud-server...
GHSA-WQ5F-XC86-PV6W vulnerabilities
Vulnerabilities for packages: homepage, peerdb-ui, langfuse-fips, langfuse, keep, tileserver-gl, tileserver-gl-fips, keep-fips...
CVE-2026-97058 vulnerabilities
Vulnerabilities for packages: graalvm, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, jupyter-base-notebook...
GHSA-HP3W-G68C-FV3C vulnerabilities
Vulnerabilities for packages: graalvm, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, jupyter-base-notebook...
CVE-2026-74866 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, langfuse-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips...
GHSA-GXM5-99CW-XJW9 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, langfuse-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips...
GHSA-PQG4-J6R4-53MV vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, renovate, code-server, commercial-gitlab-rails-ee, gemini-cli, arangodb, gitlab-rails-ce-fips...
CVE-2026-102422 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, commercial-gitlab-rails-ee-fips, renovate, code-server, commercial-gitlab-rails-ee, gemini-cli, arangodb, gitlab-rails-ce-fips...
CVE-2026-102422 vulnerabilities
Vulnerabilities for packages: renovate, code-server...
GHSA-PQG4-J6R4-53MV vulnerabilities
Vulnerabilities for packages: renovate, code-server...
CVE-2026-90771 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-WR44-6HXH-3JWQ vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-238P-PMPM-9MQ7 vulnerabilities
Vulnerabilities for packages: renovate, code-server, jupyter-base-notebook, langfuse...