358170 matches found
CVE-2026-106486
Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...
CVE-2026-106486
The Backstage framework contains a vulnerability in its Bitbucket pull-request Scaffolder actions due to improper filesystem path validation . Specifically, versions prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-m...
DEBIAN-CVE-2026-106446
Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile and Handlebars.precompile accept pre-parsed AST objects while validating only selected PathExpression, NumberLiteral, and BooleanLiteral values. This issue bypasses the AST...
CVE-2026-103059
When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...
CVE-2026-102155
An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...
CVE-2026-106458 Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates
Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...
CVE-2026-106458 Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates
Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...
CVE-2026-106458
The Backstage framework affects the @backstage/plugin-catalog-backend-module-bitbucket-server package in versions 0.4.0 through 0.5.15 . The vulnerability stems from inconsistent repository filtering during Bitbucket Server catalog event updates. Specifically, deployments using event-driven updat...
CVE-2026-106458 Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates
Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...
CVE-2026-32773
A flaw was found in Apache Spark. The Spark History Server lacks proper Cross-Site Scripting XSS escaping, allowing a malicious Spark job to generate arbitrary unescaped frontend code. This vulnerability can be exploited by an attacker who has the ability to launch a Spark job and can trick a use...
CVE-2026-102155 Security Advisory 0190
An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...
CVE-2026-102155 Security Advisory 0190
An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...
CVE-2026-102155
The WiFi-server Spectralight application is susceptible to an XML External Entity (XXE) injection vulnerability. This flaw allows any authenticated user to submit malicious requests, which can result in arbitrary local file disclosure and a partial denial of service . While the vulnerability's te...
EUVD-2026-93953
An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...
CVE-2026-106445 Handlebars: JavaScript Injection via Own Property Check Bypass
Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker ca...
CVE-2026-103059 Gitea built-in SSH server authentication bypass through key case folding
When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...
EUVD-2026-93906
When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...
CVE-2026-103059 Gitea built-in SSH server authentication bypass through key case folding
When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...
CVE-2026-103059
A flaw in Gitea allows an authentication bypass when the built-in SSH server is enabled (START_SSH_SERVER = true). The root cause is the use of an SQL LIKE comparison for looking up public keys, which is case-insensitive on certain databases like SQLite . An attacker who can construct a case vari...
CVE-2026-103059 Gitea built-in SSH server authentication bypass through key case folding
When Gitea's built-in SSH server is enabled STARTSSHSERVER = true, the presented public key was looked up with an SQL LIKE comparison of its encoded content, which is case-insensitive on some databases, including the default SQLite. An attacker who can construct a case variant of another user's...