266076 matches found
PT-2026-105135
cleanup xml node in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion...
PT-2026-105145
cleanup xml node in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion...
AlmaLinux 9.2 [TuxCare] Security Update: mod_proxy_cluster Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778858907)
The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778858907 advisory. - A flaw was found in the modproxycluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias'...
@chocolatey-software/astro (2.10.0), @hyperscale-it/agent-workflow (0.1.0) +1 more potentially affected by CVE-2026-102984 via @astrojs/node (>=11.0.2, <=11.0.3)
@astrojs/node NPM version =11.0.2, =0.1.0, =0.2.2 Source cves: CVE-2026-102984 Source advisory: OSV:GHSA-QH8J-HQJV-7M4X...
@chocolatey-software/astro (2.10.0), @hyperscale-it/agent-workflow (0.1.0) +1 more potentially affected by CVE-2026-102984 via @astrojs/node (>=11.0.2, <=11.0.3)
@astrojs/node NPM version =11.0.2, =0.1.0, =0.2.2 Source cves: CVE-2026-102984 Source advisory: GHSA-QH8J-HQJV-7M4X...
GHSA-QH8J-HQJV-7M4X Astro: Malformed port in the Host header can crash the Node adapter
Summary In the Astro Node adapter, a request whose Host header contains a malformed port for example example.com:65536 or example.com:8080:8080 produced an invalid request URL. The fallback intended to recover from an unparseable URL reused the same malformed host, so it failed again and raised a...
Astro: Malformed port in the Host header can crash the Node adapter
Summary In the Astro Node adapter, a request whose Host header contains a malformed port for example example.com:65536 or example.com:8080:8080 produced an invalid request URL. The fallback intended to recover from an unparseable URL reused the same malformed host, so it failed again and raised a...
org.jasig.portal.fbms:fbms-webapp (>=0.9.0, <=0.9.2), org.webjars.npm:adal-node (0.1.28) +88 more potentially affected by CVE-2026-103387 via org.webjars.npm:uri-js (>=3.0.2, <=4.4.1)
org.webjars.npm:uri-js MAVEN version =3.0.2, =0.9.0, =6.4.0, =1.5.2, =2.1.0, =0.1.3, =1.4.1 - org.webjars.npm:eureka-js-client 4.3.0 and more Source cves: CVE-2026-103387 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-20341610...
CVE-2026-102136
In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written into monitoring configuration on another node without sufficient validation, potentially allowing OS commands to be...
GHSA-2GQQ-GQF2-X968 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-2JFJ-6HJV-FM6J vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-3XPG-4RPP-HHHM vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-8436-99HF-9MMV vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-RX4F-C7P8-82VQ vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-W293-VG96-WGC3 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GO-2026-6506 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, eks-distro-fips, k8sgateway, kubernetes-dns-node-cache-fips, juicefs, k8sgateway-fips, eks-distro...
GHSA-2JFJ-6HJV-FM6J vulnerabilities
Vulnerabilities for packages: lerna, code-server, prism, node-gyp...
GHSA-3XPG-4RPP-HHHM vulnerabilities
Vulnerabilities for packages: lerna, code-server, prism, node-gyp...