BIT-RABBITMQ-2026-66073 RabbitMQ: Atom table exhaustion via management API node field

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make →...

BIT-RABBITMQ-2026-66069 RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

ROOT-APP-MAVEN-CVE-2026-34479 CVE-2026-34479 in org.apache.logging.log4j:log4j-1.2-api - Patched by Root

Root has patched CVE-2026-34479 in the org.apache.logging.log4j:log4j-1.2-api package for Root:Maven. Multiple fixed versions available...

BIT-AUTHENTIK-2026-94611 authentik: Stored credentials are readable with view permission alone

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...

EUVD-2026-90582

In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...

CVE-2026-103491

In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...

CVE-2026-103491

In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...

CVE-2026-103491

JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw within the issue activities API . This vulnerability allows an attacker to read restricted issues that they should not have access to. The base CVSS score is 6.5 (MEDIUM) , indicati...

CLEANSTART-2024-ML93442 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89

Security vulnerability affects the chromium package. Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89...

CLEANSTART-2024-GW42841 Use after free in Network API in Google Chrome prior to 90

Security vulnerability affects the chromium package. Use after free in Network API in Google Chrome prior to 90...

CLEANSTART-2024-PX18765 Use after free in File System API in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in File System API in Google Chrome prior to 92...

CLEANSTART-2024-KP03061 Use after free in Extensions API in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in Extensions API in Google Chrome prior to 92...

CLEANSTART-2024-ED20723 Chromium: CVE-2021-30610 Use after free in Extensions API

Security vulnerability affects the chromium package. Chromium: CVE-2021-30610 Use after free in Extensions API...

CLEANSTART-2024-WR63276 Use after free in Indexed DB API in Google Chrome prior to 93

Security vulnerability affects the chromium package. Use after free in Indexed DB API in Google Chrome prior to 93...

CLEANSTART-2024-AF65938 Use after free in Selection API in Google Chrome prior to 93

Security vulnerability affects the chromium package. Use after free in Selection API in Google Chrome prior to 93...

CLEANSTART-2024-WW04162 Inappropriate implementation in Gamepad API in Google Chrome prior to 98

Security vulnerability affects the chromium package. Inappropriate implementation in Gamepad API in Google Chrome prior to 98...

CLEANSTART-2024-NO32107 Use after free in Webstore API in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Webstore API in Google Chrome prior to 98...

CLEANSTART-2024-LY68253 Inappropriate implementation in Extensions API in Google Chrome prior to 101

Security vulnerability affects the chromium package. Inappropriate implementation in Extensions API in Google Chrome prior to 101...

CLEANSTART-2024-AM48749 Use after free in File System API in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in File System API in Google Chrome prior to 101...

CLEANSTART-2024-GX16186 Insufficient policy enforcement in Extensions API in Google Chrome prior to 102

Security vulnerability affects the chromium package. Insufficient policy enforcement in Extensions API in Google Chrome prior to 102...