266080 matches found
Rocky Linux 9 [CIQ] Security Update: linux-sgx-debuginfo / linux-sgx-debugsource / sgx-common / sgx-libs / etc Multiple Vulnerabilities (crlsa-2026_18868)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202618868 advisory. qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-tar: Arbitrary file overwrite and symlink...
AlmaLinux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790253961)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790253961 advisory. - brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the...
Rocky Linux 9 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_47058)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202647058 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed tar...
Rocky Linux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790253961)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790253961 advisory. - brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in th...
PT-2026-103780
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
Linux Distros Unpatched Vulnerability : CVE-2026-92873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node...
PT-2026-103787
Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.80 n8n versions 2.0.0 through 2.39.5 n8n versions 2.40.0 Description A path traversal issue exists in the signed resume URL generation for Send-and-Wait approvals. Users with workflow creation permissions can forge...
@chocolatey-software/astro (2.10.0), @hyperscale-it/agent-workflow (0.1.0) +1 more potentially affected by CVE-2026-102984 via @astrojs/node (>=11.0.2, <=11.0.3)
@astrojs/node NPM version =11.0.2, =0.1.0, =0.2.2 Source cves: CVE-2026-102984 Source advisory: OSV:GHSA-QH8J-HQJV-7M4X...
@chocolatey-software/astro (2.10.0), @hyperscale-it/agent-workflow (0.1.0) +1 more potentially affected by CVE-2026-102984 via @astrojs/node (>=11.0.2, <=11.0.3)
@astrojs/node NPM version =11.0.2, =0.1.0, =0.2.2 Source cves: CVE-2026-102984 Source advisory: GHSA-QH8J-HQJV-7M4X...
GHSA-QH8J-HQJV-7M4X Astro: Malformed port in the Host header can crash the Node adapter
Summary In the Astro Node adapter, a request whose Host header contains a malformed port for example example.com:65536 or example.com:8080:8080 produced an invalid request URL. The fallback intended to recover from an unparseable URL reused the same malformed host, so it failed again and raised a...
Astro: Malformed port in the Host header can crash the Node adapter
Summary In the Astro Node adapter, a request whose Host header contains a malformed port for example example.com:65536 or example.com:8080:8080 produced an invalid request URL. The fallback intended to recover from an unparseable URL reused the same malformed host, so it failed again and raised a...
org.jasig.portal.fbms:fbms-webapp (>=0.9.0, <=0.9.2), org.webjars.npm:adal-node (0.1.28) +88 more potentially affected by CVE-2026-103387 via org.webjars.npm:uri-js (>=3.0.2, <=4.4.1)
org.webjars.npm:uri-js MAVEN version =3.0.2, =0.9.0, =6.4.0, =1.5.2, =2.1.0, =0.1.3, =1.4.1 - org.webjars.npm:eureka-js-client 4.3.0 and more Source cves: CVE-2026-103387 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-20341610...
CVE-2026-102136
In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written into monitoring configuration on another node without sufficient validation, potentially allowing OS commands to be...
GHSA-2GQQ-GQF2-X968 vulnerabilities
Vulnerabilities for packages: node-gyp, kibana, lerna, commercial-gitlab-rails-ee, prism, homepage, code-server, commercial-gitlab-rails-ee-fips...
GHSA-3XPG-4RPP-HHHM vulnerabilities
Vulnerabilities for packages: node-gyp, kibana, lerna, commercial-gitlab-rails-ee, prism, homepage, code-server, commercial-gitlab-rails-ee-fips...
GHSA-RX4F-C7P8-82VQ vulnerabilities
Vulnerabilities for packages: node-gyp, kibana, lerna, commercial-gitlab-rails-ee, prism, homepage, code-server, commercial-gitlab-rails-ee-fips...
GHSA-2JFJ-6HJV-FM6J vulnerabilities
Vulnerabilities for packages: node-gyp, kibana, lerna, commercial-gitlab-rails-ee, prism, homepage, code-server, commercial-gitlab-rails-ee-fips...
GHSA-8436-99HF-9MMV vulnerabilities
Vulnerabilities for packages: node-gyp, kibana, lerna, commercial-gitlab-rails-ee, prism, homepage, code-server, commercial-gitlab-rails-ee-fips...