261588 matches found
CVE-2026-71430 node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length
node-re2 provides RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the WrappedRE2::Replace function built its replacement result and passed it to V8 using ToLocalChecked without checking for the empty MaybeLocal that V8 returns when the resulting string or buffer exceeds V8's...
CVE-2026-61632
PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. In versions up to and including 10.21.3, the b64 extension is vulnerable to a path traversal that discloses arbitrary files: it inlines images referenced by by joining the src onto the configured basepath with...
CVE-2026-70475
creationtimestamp| type| source ---|---|--- 2026-08-06 20:45:28+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-flowise...
CVE-2026-71436
creationtimestamp| type| source ---|---|--- 2026-08-06 20:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2v8p-3f2j-5mp7...
CVE-2026-19151
Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-19146
Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
GHSA-4HFH-6X8G-GWPP vulnerabilities
Vulnerabilities for packages: kafbat-ui-fips, kafbat-ui...
CVE-2026-48074
OpenReception OpenReception: CVE-2026-48074 describes a cross-tenant data cleanup bug in Staff deletion. Before v1.0.6, deleting a staff member triggers an invite cleanup that removes from the central user_invite table by email without scoping to tenantId. As a result, a TENANT_ADMIN in one tenan...
CVE-2026-34502
creationtimestamp| type| source ---|---|--- 2026-08-06 20:23:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5srs56fggdye6...
CVE-2026-19069
CVE-2026-19069 affects the itsourcecode Hospital Management System 1.0, specifically the /treatmentrecord.php endpoint. The vulnerability arises from manipulating the editid parameter, enabling SQL injection. Exploitation is remote, and public disclosures exist. Connected sources document this is...
CVE-2026-65400
creationtimestamp| type| source ---|---|--- 2026-08-06 19:12:31+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117050150130082823 2026-08-06 19:12:43+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msgqpugd53h2 2026-08-07 01:54:06+00:00| seen|...
CVE-2026-64655 GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching
GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...
Important: Red Hat Security Advisory: glib2 security update
An update for glib2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
CVE-2026-71327 Traefik: Gateway API route identity collision allows cross-namespace backend hijacking
Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and...
CVE-2026-7406 BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
CVE-2026-65553
creationtimestamp| type| source ---|---|--- 2026-08-06 16:08:30+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggfx7l7n2p 2026-08-10 08:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspnvqxdlh2r 2026-08-11 04:16:08+00:00| seen|...
CVE-2026-65548
creationtimestamp| type| source ---|---|--- 2026-08-06 16:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggcelol42b...
CVE-2026-66662
creationtimestamp| type| source ---|---|--- 2026-08-06 16:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgg37i3ay2i 2026-08-06 22:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msh24av7pe2e...