24 matches found
agama-web-ui-23+75.1a877fb50-50.1 on GA media (moderate)
agama-web-ui-23+75.1a877fb50-50.1 on GA media Announcement ID: openSUSE-SU-2026:11472-1 Rating: moderate Cross-References: CVE-2026-13311 CVSS scores: CVE-2026-13311 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-13311 SUSE : 8.7...
CVE-2026-13311 vulnerabilities
Vulnerabilities for packages: code-server...
CVE-2026-13311 vulnerabilities
Vulnerabilities for packages: arangodb, gemini-cli, gitlab-rails-ce-fips, gitlab-rails-ce, code-server...
Linux Distros Unpatched Vulnerability : CVE-2026-13311
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shell-quote prior to 1.8.5 finalizes parsed tokens in parse using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growin...
org.webjars.npm:github-com-wavesoft-local-echo (=0.2.0), org.webjars.npm:launch-editor (=2.2.1) +2 more potentially affected by CVE-2026-13311 via org.webjars.npm:shell-quote (=1.8.3)
org.webjars.npm:shell-quote MAVEN version =1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:shell-quote and may be impacted: - org.webjars.npm:github-com-wavesoft-local-echo =0.2.0 - org.webjars.npm:launch-editor =2.2.1 -...
CVE-2026-13311
creationtimestamp| type| source ---|---|--- 2026-06-25 06:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp3qussy5o2f 2026-06-25 06:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116809218637128816 2026-06-25 06:45:49+00:00| seen|...
UBUNTU-CVE-2026-13311
shell-quote prior to 1.8.5 finalizes parsed tokens in parse using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a result parse runs in On^2 time relative to the number of input tokens. An attacker who can supply an...
CVE-2026-13311 shell-quote parse() is quadratic in token count, enabling denial of service
shell-quote prior to 1.8.5 finalizes parsed tokens in parse using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a result parse runs in On^2 time relative to the number of input tokens. An attacker who can supply an...
CVE-2026-13311 shell-quote parse() is quadratic in token count, enabling denial of service
shell-quote prior to 1.8.5 finalizes parsed tokens in parse using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a result parse runs in On^2 time relative to the number of input tokens. An attacker who can supply an...
CVE-2026-13311
shell-quote prior to 1.8.5 finalizes parsed tokens in parse using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a result parse runs in On^2 time relative to the number of input tokens. An attacker who can supply an...
CVE-2025-13311
creationtimestamp| type| source ---|---|--- 2025-11-25 09:10:33+00:00| seen| https://gist.github.com/Darkcrai86/6483c18e8b5144863fe800a242d4a657...
CVE-2024-13311 Allow All File Extensions for file fields - Critical - Unsupported - SA-CONTRIB-2024-075
Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields:...
CVE-2017-13311
creationtimestamp| type| source ---|---|--- 2024-11-15 21:47:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113489167507386471 2024-11-16 00:10:02+00:00| seen| https://t.me/cvedetector/11195...
CVE-2021-31497
OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31497 through a DWG file parsing flaw. The vulnerability arises from failure to validate the existence of an object before operations, enabling arbitrary code execution in the process context. User interaction is required (visiting a malic...
CVE-2021-31497
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2020-13311
CVE-2020-13311 affects GitLab versions prior to 13.1.10, 13.2.8, and 13.3.4, where the Wiki parser can be attacked, preventing access to Wiki functionality via the UI. The issue is defined as a Wiki parser attack that blocks UI access, with reported CVSS metrics (v2: 4.0 MEDIUM; v3.1: 4.3 MEDIUM)...
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-13311
creationtimestamp| type| source ---|---|--- 2019-07-05 04:00:14+00:00| seen| https://t.me/cveNotify/233...