168757 matches found
CVE-2026-59885 vulnerabilities
Vulnerabilities for packages: datadog-agent, superset, kubeflow-volumes-web-app, kubeflow-jupyter-web-app...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: datadog-agent, superset, kubeflow-volumes-web-app, kubeflow-jupyter-web-app...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: kubo, loki, flux, external-dns, kine, kyverno, containerd, cert-manager, aactl, kubernetes-dashboard, runc, k3s, kaf, minio, helm, telegraf, kube-fluentd-operator...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: kubo, loki, flux, external-dns, kine, kyverno, containerd, cert-manager, aactl, kubernetes-dashboard, runc, k3s, kaf, minio, helm, telegraf, kube-fluentd-operator...
CVE-2026-65913
DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USEPROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Array.prototype properties like onclick to true, causing DOMPurify to accept event handlers as...
CVE-2026-65901
DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...
CVE-2026-65898
DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is used with an uponSanitizeAttribute hook, allowing the hook to permanently mutate the shared allowlist. Attackers can register a hook that conditionally allows dangerous attributes like onerror for trusted elements,...
Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize
A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...
GHSA-8WHX-365G-H9VV vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, ruby3.3-rails...
GHSA-9WJQ-CP2P-HRGF vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, ruby3.3-rails...
GHSA-CJ75-F6XR-R4G7 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, ruby3.3-rails...
GHSA-5QHF-9PHG-95M2 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, ruby3.3-rails...
GHSA-XVCM-6775-5M9R vulnerabilities
Vulnerabilities for packages: rancher-api-ui...
CVE-2026-59880 vulnerabilities
Vulnerabilities for packages: rancher-api-ui...
GHSA-V56Q-MH7H-F735 vulnerabilities
Vulnerabilities for packages: rancher-api-ui...
CVE-2026-59879 vulnerabilities
Vulnerabilities for packages: rancher-api-ui...
CVE-2026-53070 vulnerabilities
Vulnerabilities for packages: linux-gcp...
CVE-2026-53101 vulnerabilities
Vulnerabilities for packages: linux-gcp...