3558 matches found
computation-graph (0.0.5), dug-test (>=1.0.0, <=1.0.13) potentially affected by CVE-2025-71176 via pytest (5.4.0)
pytest PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - computation-graph 0.0.5 - dug-test =1.0.0, =1.0.13 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...
Azure Linux 3.0 Security Update: kernel (CVE-2024-39481)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39481 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: mc: Fix graph walk in...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37940)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37940 advisory. - In the Linux kernel, the following vulnerability has been resolved: ftrace: Add condresched to...
CVE-2021-47748
Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the runsql endpoint by crafting malicious GraphQL queries that execute system commands through...
SAGA: Detecting Security Vulnerabilities Using Static Aspect Analysis
Python is one of the most popular programming languages; as such, projects written in Python involve an increasing number of diverse security vulnerabilities. However, existing state-of-the-art analysis tools for Python only support a few vulnerability types. Hence, there is a need to detect a...
CVE-2026-1172 birkir prime GraphQL Directive graphql denial of service
A vulnerability has been found in birkir prime up to 0.4.0.beta.0. The affected element is an unknown function of the file /graphql of the component GraphQL Directive Handler. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclose...
Prime security vulnerabilities
Prime is a content management system developed by Birkir Gudjonsson. Versions of Prime prior to 0.4.0.beta.0 contained security vulnerabilities, which were caused by improper handling of parameters in files and GraphQL requests. These vulnerabilities could lead to information leaks...
Prime security vulnerabilities
Prime is a content management system developed by Birkir Gudjonsson. Versions of Prime prior to 0.4.0.beta.0 contained security vulnerabilities, which were caused by incorrect operations with files and GraphQL queries, potentially leading to resource consumption...
GHSA-HRVF-G648-RF3M PlantUML is vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams
Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams. As a result, a crafted PlantUML diagram can inject malicious JavaScript into generated SVG output, leading to...
GitLab GraphQL Query Execution Environment Data Compromise
The vulnerability of the GraphQL query execution environment of a Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity and...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002550)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002550 advisory. The archtimerregreadstable macro in arch/arm64/include/asm/archtimer.h in the Linux kernel before 4.13 allows local users to cause a denial of service infinite...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002107)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002107 advisory. The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have...
@jamietanna/patch-testing (>=0.1.0, <=0.2.28), @jamietanna/renovate-graph (>=0.24.0, <=0.30.0) +1 more potentially affected by unknown CVE via renovate (>=39.60.0, <=40.21.2)
renovate NPM version =39.60.0, =0.1.0, =0.24.0, =0.5.3, =1.0.1 Source cves: unknown CVE Source advisory: GHSA-XJR7-3C3G-M763...
@jamietanna/renovate-graph (>=0.24.0, <=0.30.0), @secustor/backstage-plugin-renovate-backend-module-runtime-direct (>=0.6.5, <=1.0.1) potentially affected by unknown CVE via renovate (>=39.230.2, <=40.21.2)
renovate NPM version =39.230.2, =0.24.0, =0.6.5, =1.0.1 Source cves: unknown CVE Source advisory: GHSA-XV56-3WQ5-9997...
Deep Learning-Based Binary Analysis for Vulnerability Detection in X86-64 Machine Code
While much of the current research in deep learning-based vulnerability detection relies on disassembled binaries, this paper explores the feasibility of extracting features directly from raw x86-64 machine code. Although assembly language is more interpretable for humans, it requires more comple...
FreeBSD : Gitlab -- vulnerabilities (c9b610e9-eebc-11f0-b051-2cf05da270f3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c9b610e9-eebc-11f0-b051-2cf05da270f3 advisory. Gitlab reports: Stored Cross-site Scripting issue in GitLab Flavored Markdown placeholders...
Server-Side Request Forgery (SSRF)
Craft CMS is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of the file.url parameter in the GraphQL save Asset mutation, which allows an attacker with asset management permissions to force the server to fetch internal or restricted resources and...
CVE-2025-11246 Insufficient Granularity of Access Control in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user with specific permissions to remove all project runners from unrelated projects by manipulating GraphQL runner...
CVE-2025-13781 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to modify instance-wide AI feature provider settings by exploiting missing authorization checks in GraphQL mutations...
