168308 matches found
CVE-2026-19017
A flaw was found in Consul. A privileged attacker with operator:write permission can exploit a partial arbitrary file read vulnerability when Consul is configured to use the Vault Connect CA provider with JWT or AppRole authentication. This allows the attacker to direct Consul to read and forward...
CVE-2026-73305
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:26+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-j9fc-w3mr-x6mv 2026-08-14 01:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msyxhdipyh26...
CVE-2026-73406
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:13+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-hr66-5mqr-8mpx 2026-08-12 21:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvzmlg3ko22...
USN-8632-1 node-follow-redirects vulnerability
Dennis Sepede discovered that follow-redirects did not properly remove custom authentication headers when following cross-domain redirects. An attacker could possibly use this issue to obtain sensitive authentication information, resulting in credential disclosure...
CVE-2026-16723 vulnerabilities
Vulnerabilities for packages: seata...
CVE-2026-59848 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59843 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-JP6G-7MQJ-WJ53 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59847 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59845 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59849 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-FVWJ-J79Q-57V7 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-6J7F-8JJP-MM8C vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59842 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-X94W-CG8G-G593 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-QP28-HPG5-J7XC vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-54465 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2026-54464 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-GHHP-3QVG-889P vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2026-73419 NextAuth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them
NextAuth.js provides authentication for Next.js. Prior to@auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, Auth.js stores the OAuth/OIDC anti-CSRF checks state, nonce, and the PKCE verifier in global cookies that are not bound to the provider that created them. On callback, a check value...