177207 matches found
CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
CVE-2026-56858
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...
CVE-2026-56853
When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...
CVE-2026-56860
Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...
CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
CVE-2026-73480
gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other...
CVE-2026-73430 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73429 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73491 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, ruby3.4-rails...
CVE-2026-73420 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
CVE-2026-73418 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
CVE-2026-73419 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
CVE-2026-73502 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, gitness, crossplane-provider-aws-cloudfront, terraform-provider-grafana, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs,...
CVE-2026-54399 vulnerabilities
Vulnerabilities for packages: opensearch, akhq, apicurio-registry, logstash, thingsboard, cassandra-reaper, nrjmx, druid, kserve-modelmesh, sonarqube...
CVE-2026-73429 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73430 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73489 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73427 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, ruby3.3-rails, ruby3.4-rails...