6551 matches found
GO-2026-6084 Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL in gitea.dev
Gitea: SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL in gitea.dev...
PT-2026-65370
Gitea LFS Deploy-Key Privilege Escalation in gitea.dev...
PT-2026-65369
Gitea Remember-Me Token Theft Not Invalidating Attacker Session in gitea.dev...
PT-2026-65381
Gitea: SSRF in restore-repo via unsanitized pull request.yml Head.CloneURL in gitea.dev...
PT-2026-65364
Gitea: Private Repository Existence Disclosure via go-get Meta Endpoint in gitea.dev...
PT-2026-65357
Gitea: Public-only API token restriction is not enforced on team API routes in gitea.dev...
Malicious Package
Overview @adobesign/as-dev-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
CVE-2026-64309
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCOMMIT Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...
UBUNTU-CVE-2026-64456
In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...
CVE-2026-64433 Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hciconnparams in adddevicecomplete adddevicecomplete runs from the hcicmdsyncwork kworker, which holds only hcireqsynclock and not hcidevlock. It calls hciconnparamslookup and then dereferences the...
CVE-2026-64433
CVE-2026-64433 is a Use-After-Free in the Linux kernel's Bluetooth MGMT subsystem (net/bluetooth/mgmt.c). The function add_device_complete() calls hci_conn_params_lookup() and reads params->flags without holding hci_dev_lock, allowing a concurrent MGMT_OP_REMOVE_DEVICE to free the underlying o...
CVE-2026-64305 crypto: qat - protect service table iterations with service_lock
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with servicelock The servicetable list is protected by servicelock when entries are added or removed in adfserviceadd and adfserviceremove, but several functions iterate over the lis...
CVE-2026-64339: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbiobulkmsg copies bpktlen = le16tocpubpkt-len bytes out of the bulk IN buffer usbio-rxbuf, allocated with size usbio-rxbuflen into the caller's buffer...
PT-2026-64597
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the firmware loader. In the firmware upload register function, if alloc lookup fw priv fails after fw create instance has successfully executed, the system cal...
GHSA-GH4H-34GR-87R7 Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders
Summary When an SSO-authenticated user tests an automation in the Budibase builder, their OAuth2 access token and refresh token are included in the automation test results. These results are broadcast via WebSocket to all builders connected to the same dev app and stored in an in-memory cache...
OESA-2026-3154 runc security update
runc is a CLI tool for spawning and running containers according to the OCI specification. Security Fixes: runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when setting up th...
com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)
org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: OSV:GHSA-2FVJ-HGJ9-J2GR...
GO-2026-6035 Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content in gitea.dev
Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content in gitea.dev...
GO-2026-6048 Gitea: Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override in gitea.dev
Gitea: Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override in gitea.dev...