261576 matches found
CVE-2026-71315 Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)
Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to match case-folded lookups when router.options.sensitive is false and drop appMiddleware authorization gates. This is caused by an incomplete fix for...
CVE-2026-15430
creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:03+00:00| seen| Telegram/MD75k-cDFtv9LnjecJEQAz4SDttk4ZkvpNpcWsPC7HMdiM 2026-08-05 21:00:03+00:00| seen| Telegram/6p3PAYOSat3nZO9NlFWMr5GgoKupNTDZqtKSi9BnUGK1nd4 2026-08-06 00:00:09+00:00| published-proof-of-concept|...
GHSA-4VR5-P2GC-H23P rclone archive extract allows S3 destination prefix escape via crafted archive paths
Summary rclone archive extract can write extracted files outside the user-selected destination prefix when extracting a crafted archive. A malicious archive entry containing parent path components such as ../ can escape the requested extraction prefix and create or overwrite sibling objects in th...
EUVD-2026-44533
rclone serve restic --private-repos authorization bypass: .. in the URL path lets an authenticated user read, overwrite and delete other users' repositories...
CVE-2026-59881 vulnerabilities
Vulnerabilities for packages: open-webui, dask-kubernetes, kserve, py3-cassandra-medusa, airflow...
GHSA-MQ44-7P77-Q5H7 vulnerabilities
Vulnerabilities for packages: open-webui, dask-kubernetes, kserve, py3-cassandra-medusa, airflow...
GHSA-X4CW-WG5H-4QX6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W7PH-97WC-Q2JR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PWGG-JHVP-WR6H vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PV4W-F6R6-3QCW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M4VJ-4237-7QMX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GRFX-V4XP-4M33 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-WM9R-82QW-CFP5 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PP42-FQP9-76JC vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-P25H-4WCW-9PR8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JG6F-WWPP-JHGG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J83G-XPXW-HFHM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J795-4RHG-3GV3 vulnerabilities
Vulnerabilities for packages: chromium...