262252 matches found
CVE-2024-39575
Technical details are not publicly available in the provided documents; monitor for updates.
CVE-2026-12003
creationtimestamp| type| source ---|---|--- 2026-06-16 17:42:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mogdvv6nl72p 2026-06-16 18:41:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogh75ee632m 2026-06-17 17:13:31+00:00| seen|...
GHSA-5XP3-2W67-427V n8n: Git Node Clone and Push Operations Bypass File Sandbox
Impact An authenticated user with permission to create or modify workflows could supply a local filesystem path as the source repository in the Git node's Clone operation, or as the target repository in the Push operation, bypassing the N8NRESTRICTFILEACCESSTO file sandbox. This allowed the...
CVE-2025-13036
creationtimestamp| type| source ---|---|--- 2026-06-16 17:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogdijmck32f 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-03...
UBUNTU-CVE-2026-12003
To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...
CVE-2026-47748
CVE-2026-47748 affects stable-diffusion.cpp (C/C++ library) prior to master-584-0a7ae07. The root cause is out-of-bounds reads in the PyTorch checkpoint pickle opcode parsing in src/model.cpp, where the parser sometimes advances buffer positions without validating remaining input, allowing reads ...
Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Input Validation (CVE-2025-66400)
Summary There are vulnerabilities in mdast-util-to-hast-13.2.0.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-66400. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2025-66400 DESCRIPTION: mdast-util-to-hast is an mdast utility to transform to hast. Fro...
gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName DNS or rfc822Name email constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploit this by crafting a leaf...
gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin
A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path...
EUVD-2024-55624
api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintended actions...
Security Bulletin: Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2026 - Includes Oracle April 2026 CPU
Summary Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2026 - Includes Oracle April 2026 CPU plus CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, and CVE-2026-22007 Vulnerability Details CVEID:CVE-2026-22016...
CVE-2026-42089 yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass...
CVE-2026-53776 Perry < 0.5.1166 JWT Expiration Bypass via verify_decode
Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validateexp = false in the verifydecode helper within the stdlib JWT verification path. Attackers in possession of a previously issued...
CVE-2026-9006
creationtimestamp| type| source ---|---|--- 2026-06-16 15:00:06+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mog2tg6zxc24 2026-06-16 15:10:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mog3fas22c2h 2026-07-02 08:27:48+00:00| seen|...
GHSA-P4GQ-832X-FM9V Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
Summary nltk.data.load in NLTK is vulnerable to path traversal via URL-encoded path separators and traversal segments when using the nltk: URL scheme. The unsafe-path regex check is performed before url2pathname decodes the %xx sequences a classic decode-after-check / TOCTOU-style flaw, allowing ...
CVE-2026-54421
A flaw was found in OpenStack Ironic. When an authorized user applies a PATCH operation to update volume properties, the system can inadvertently expose sensitive information, such as iSCSI credentials. This information disclosure vulnerability allows an attacker to gain access to credentials tha...
Improperly Implemented Security Check for Standard
Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard in the Lambda@Edge adapter that truncates repeated request headers. An attacker can bypass access restrictions or affect auditing...
CVE-2026-3276 vulnerabilities
Vulnerabilities for packages: python...
GHSA-993G-76C3-P5M4 vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.1-fips, ggshield, superset-fips, netbox, openstack-placement-2025.1, openstack-horizon-2026.1-fips, superset, airflow-postgres-fips, openstack-horizon-2025.2-fips, openstack-keystone-2026.1, openstack-keystone-2026.1-fips,...