178360 matches found
CVE-2026-56818
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...
CVE-2026-71557
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference name for example containing...
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
CVE-2026-62996
Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a...
GHSA-VWF4-M7J8-WCJF vulnerabilities
Vulnerabilities for packages: metabase...
CVE-2026-13769 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-464C-974J-9XM6 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-R8H2-QPFX-MX59 vulnerabilities
Vulnerabilities for packages: metabase...
GHSA-8HMM-HRHG-PPQP vulnerabilities
Vulnerabilities for packages: metabase...
GHSA-WFP6-F47H-HXC3 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-61477
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...
CVE-2026-56850 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-58043 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-777R-4CWX-G26V vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-HW7R-7V27-7388 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-56847 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-QRQ2-C54W-WGQM vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-41186 vulnerabilities
Vulnerabilities for packages: calico-fips...