255754 matches found
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: minio-operator, osv-scanner, aws-privateca-issuer, cortex, crossplane-provider-aws-kinesis, vertical-pod-autoscaler, external-dns, crossplane-provider-azure-sql, cri-tools, rancher-machine, s5cmd, traefik, kubelet-csr-approver, kine, flux-kustomize-controller, cosign...
Linux Distros Unpatched Vulnerability : CVE-2026-73566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an...
CVE-2026-13460
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...
EUVD-2026-58361
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...
CVE-2026-13460
CVE-2026-13460 affects IBM Storage Scale GUI, with versions 5.2.3.0–5.2.3.8 and 6.0.0.0–6.0.1.0 containing a hardcoded token in the GUI source used for inter-node cluster communication and REST API authentication. The security bulletin indicates fixes in 5.2.3.9 or later and 6.0.1.1 or later. Rem...
CVE-2026-13460
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI...
EUVD-2026-58248
A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the...
CVE-2026-72683
The CVE-2026-72683 issue affects Elasticsearch where an authenticated user able to call the simulate pipeline API can submit a request that creates a self-referential data structure. When processed by an internal component, the operation recurses without bound, causing a fatal error that terminat...
DEBIAN-CVE-2026-73566
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname and no segment cap when tar.t... or tar.x... receives a non-empty member-selection list. A...
CVE-2026-73565
@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec-WebSocket-Key header causes src/websocket.ts to retain the request's IncomingMessage in waiterMap and leave...
CVE-2026-73566
CVE-2026-73566 affects node-tar prior to 7.5.21. The filesFilter in src/list.ts uses a recursive mapHas to walk entry paths upward with path.dirname(), and with tar.t(...) or tar.x(...) and a non-empty member-selection list, a crafted GNU long-path header can reach Parser[CONSUMEHEADER] in src/pa...
CVE-2026-73566 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname and no segment cap when tar.t... or tar.x... receives a non-empty member-selection list. A...
CVE-2026-73565
CVE-2026-73565 affects @hono/node-server
CVE-2026-73565 @hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake
@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec-WebSocket-Key header causes src/websocket.ts to retain the request's IncomingMessage in waiterMap and leave...
CVE-2026-73565 @hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake
@hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malformed Sec-WebSocket-Key header causes src/websocket.ts to retain the request's IncomingMessage in waiterMap and leave...
ROOT-APP-NPM-CVE-2026-53655 CVE-2026-53655 in tar - Patched by Root
Root has patched CVE-2026-53655 in the tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-42043 CVE-2026-42043 in axios - Patched by Root
Root has patched CVE-2026-42043 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-42037 CVE-2026-42037 in axios - Patched by Root
Root has patched CVE-2026-42037 in the axios package for Root:npm. Multiple fixed versions available...