167887 matches found
ROOT-APP-NPM-CVE-2026-44582 CVE-2026-44582 in next - Patched by Root
Root has patched CVE-2026-44582 in the next package for Root:npm. Multiple fixed versions available...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderCss process. An attacker can inject malicious scripts by providing crafted custom styles through the editor settings interface, which are then rendered on backend pages. This is only exploitable if...
CVE-2026-47233 Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024
Admidio is an open-source user management solution. Version 5.0.9 added a missing isAdministratorInventory gate to case 'itemdelete': in modules/inventory.php. The same fix was not applied to the sibling case 'fielddelete': handler, which destroys an entire inventory field definition, cascading t...
MINI-VHPV-68F9-MXMP
Bulletin has no description...
ROOT-APP-NUGET-CVE-2026-40894 CVE-2026-40894 in OpenTelemetry.Api - Patched by Root
Root has patched CVE-2026-40894 in the OpenTelemetry.Api package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-50447 CVE-2023-50447 in pillow - Patched by Root
Root has patched CVE-2023-50447 in the pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-45688 CVE-2022-45688 in org.json:json - Patched by Root
Root has patched CVE-2022-45688 in the org.json:json package for Root:Maven. Multiple fixed versions available...
CLSA-2026-1786538556 TuxCare security update for 13 packages (3 CVEs)
TuxCare rebuilt 13 packages to address 3 CVEs. Fixed in 14.2.35-tuxcare.6...
ROOT-APP-PYPI-CVE-2026-34520 CVE-2026-34520 in aiohttp - Patched by Root
Root has patched CVE-2026-34520 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-23829 CVE-2024-23829 in aiohttp - Patched by Root
Root has patched CVE-2024-23829 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
CVE-2026-11325
Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...
RHSA-2026:54191 Red Hat Security Advisory: rhc-worker-script security update
Bulletin has no description...
RHSA-2026:54183 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:54185 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2026:54182 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2026:54180 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2026:54071 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:54070 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...