[SECURITY] Fedora 45 Update: ocaml-zed-3.2.3-25.fc45

Zed is an abstract engine for text editing. It can be used to write text editors, editing widgets, readlines, ... You just have to connect an engine to your inputs and rendering functions to get an editor. Zed provides: editing state management, multiple cursor support, key-binding helpers, and...

zaproxy w2026-09-30

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: zed, parseable, atuin, shadowsocks-rust, kdash, zizmor, qdrant, wasmtime, sdp-k8s-injector, wasmcloud, linkerd2-proxy, pixi, wadm, rye, tealdeer, ntpd-rs, rustup, nushell, oranda, samply, uv, deno, buck2, sqlx, xh, linkerd-extension-init, cargo-audit, wasm-pack, zola...

zaproxy w2026-08-06

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

zaproxy w2026-07-28

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

CVE-2026-53600 vulnerabilities

Vulnerabilities for packages: zed...

GHSA-35RM-7J9C-2F7M vulnerabilities

Vulnerabilities for packages: zed...

GHSA-35RM-7J9C-2F7M vulnerabilities

Vulnerabilities for packages: zed...

CVE-2026-53600 vulnerabilities

Vulnerabilities for packages: zed...

zaproxy vw2026-07-14

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

CVE-2026-57527

Zed Attack Proxy ZAP ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax.faces.ViewState HTTP response parameter...

CVE-2026-57527 ZAP ViewState Add-on Insecure Deserialization via JSFViewState.decode()

Zed Attack Proxy ZAP ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax.faces.ViewState HTTP response parameter...

CVE-2026-57527: Deserialization of Untrusted Data

Zed Attack Proxy ZAP ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax.faces.ViewState HTTP response parameter...

CVE-2026-47261 vulnerabilities

Vulnerabilities for packages: zed, wizer...

GHSA-2R75-CXRJ-CMPH vulnerabilities

Vulnerabilities for packages: zed, wizer...

CVE-2026-47261 vulnerabilities

Vulnerabilities for packages: zed, wizer...

GHSA-2R75-CXRJ-CMPH vulnerabilities

Vulnerabilities for packages: zed, wizer...

CVE-2026-44461

Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment variable keys are inserted without shell quoting or validation. If an attacker can control an environment variable key for example via project termin...

CVE-2026-44465

Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution RCE when a victim open a folder in untrusted mode...

Linux Distros Unpatched Vulnerability : CVE-2026-44463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted...