GHSA-RGW5-RVV9-X895 vulnerabilities

Vulnerabilities for packages: renovate, foxx-cli, serve, arangodb, sqlpad, npm, gitlab-rails-ce, wazuh-dashboard-fips, unleash-proxy, pulumi, authentik, bash-language-server, commercial-gitlab-rails-ee, rancher-api-ui, vitess, dotstatsuite-supercore, pelias-api, ts-patch, redisinsight, langfuse,...

CVE-2026-69152 vulnerabilities

Vulnerabilities for packages: renovate, foxx-cli, serve, arangodb, sqlpad, npm, gitlab-rails-ce, wazuh-dashboard-fips, unleash-proxy, pulumi, authentik, bash-language-server, commercial-gitlab-rails-ee, rancher-api-ui, vitess, dotstatsuite-supercore, pelias-api, ts-patch, redisinsight, langfuse,...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: renovate, librechat, serve, arangodb, gitlab-rails-ce, unleash-proxy, commercial-gitlab-rails-ee, vitess, langfuse, jupyter-base-notebook, opensearch-dashboards, gemini-cli, argo-workflows, langfuse-fips, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips,...

GHSA-7P8R-X3MC-P8W7 vulnerabilities

Vulnerabilities for packages: renovate, librechat, serve, arangodb, gitlab-rails-ce, unleash-proxy, commercial-gitlab-rails-ee, vitess, langfuse, jupyter-base-notebook, opensearch-dashboards, gemini-cli, argo-workflows, langfuse-fips, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

sh4d0wup v0.11.1

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

EUVD-2026-52753

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...

ROOT-APP-NPM-GHSA-6X33-PW7P-HMPQ GHSA-6x33-pw7p-hmpq in http-proxy - Patched by Root

Root has patched GHSA-6x33-pw7p-hmpq in the http-proxy package for Root:npm. Multiple fixed versions available...

CLSA-2026-1784596275 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 1.3.1-tuxcare.1...

CLSA-2026-1784509824 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 2.0.7-tuxcare.3...

CLSA-2026-1784164093 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 0.17.2-tuxcare.1...

CLSA-2026-1784164086 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 0.17.3-tuxcare.1...

CLSA-2026-1783991046 TuxCare security update for http-proxy-middleware (3 CVEs)

TuxCare rebuilt http-proxy-middleware to address 3 CVEs. Fixed in 3.0.3-tuxcare.1...

CLSA-2026-1784077482 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 2.0.7-tuxcare.1...

CLSA-2026-1776904630 TuxCare security update for https-proxy-agent (2 CVEs)

TuxCare rebuilt https-proxy-agent to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2026-1776299658 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 0.18.0-tuxcare.1...

CLSA-2026-1774657385 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 2.0.8-tuxcare.1...

CLSA-2026-1774657386 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 0.19.1-tuxcare.1...

AZL-94577 CVE-2026-70367 affecting package stunnel 5.74-1

A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...

CVE-2026-70367

A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...