13049 matches found
CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6
CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6. A patched version of the package is available...
CVE-2026-25541 affecting package rust for versions less than 1.90.0-6
CVE-2026-25541 affecting package rust for versions less than 1.90.0-6. A patched version of the package is available...
CVE-2026-25727 affecting package rust for versions less than 1.90.0-6
CVE-2026-25727 affecting package rust for versions less than 1.90.0-6. A patched version of the package is available...
strongSwan CVE-2026-25075 Vulnerability Assessment Tool
This tool allows you to safely detect whether a strongSwan VPN server is vulnerable to CVE-2026-25075 without causing any disruption. CVE-2026-25075 is an integer underflow vulnerability in strongSwan's EAP-TTLS plugin that allows remote, unauthenticated attackers to crash the IKE daemon through ...
CVE-2026-30962
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.6 and 8.6.19, the validation for protected fields only checks top-level query keys. By wrapping a query constraint on a protected field inside a logical operator, the check...
@kids-reporter/cms-core (>=1.0.17, <=1.0.36), @kids-reporter/draft-editor (>=1.0.19, <=1.0.36) potentially affected by CVE-2026-33326 via @keystone-6/core (6.5.1)
@keystone-6/core NPM version 6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @kids-reporter/cms-core =1.0.17, =1.0.19, =1.0.36 Source cves: CVE-2026-33326 Source advisory: OSV:GHSA-CGCG-Q9JH-5PR2...
@kids-reporter/cms-core (>=1.0.17, <=1.0.36), @kids-reporter/draft-editor (>=1.0.19, <=1.0.36) potentially affected by CVE-2025-46720 +1 more via @keystone-6/core (6.5.1)
@keystone-6/core NPM version 6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @kids-reporter/cms-core =1.0.17, =1.0.19, =1.0.36 Source cves: CVE-2025-46720, CVE-2026-33326 Source advisory:...
CVE-2025-12385 affecting package qt5-qtdeclarative for versions less than 5.12.5-6
CVE-2025-12385 affecting package qt5-qtdeclarative for versions less than 5.12.5-6. A patched version of the package is available...
Security update for kea
This update for kea fixes the following issues: Update to release 2.6.3 bsc1243240: CVE-2025-32801: Loading a malicious hook library can lead to local privilege escalation. CVE-2025-32802: Insecure handling of file paths allows multiple local attacks. CVE-2025-32803: Insecure file permissions can...
CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6
CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...
CVE-2025-11065 affecting package cert-manager for versions less than 1.12.15-6
CVE-2025-11065 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...
CVE-2026-1703 affecting package python-pip for versions less than 24.2-6
CVE-2026-1703 affecting package python-pip for versions less than 24.2-6. A patched version of the package is available...
CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6
CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...
CVE-2026-30962
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.6 and 8.6.19, the validation for protected fields only checks top-level query keys. By wrapping a query constraint on a protected field inside a logical operator, the check...
CVE-2026-30962 Parse Server has a protected fields bypass via logical query operators
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.6 and 8.6.19, the validation for protected fields only checks top-level query keys. By wrapping a query constraint on a protected field inside a logical operator, the check...
CVE-2026-30962
Parse Server is vulnerable prior to versions 9.5.2-alpha.6 and 8.6.19 due to a flawed protection check that only validates top-level query keys for protected fields. By wrapping a query constraint on a protected field inside a logical operator, the check is bypassed, allowing any authenticated us...
git-lfs security update
3.6.1-7 - Rebuild with new Golang 3.6.1-6 - Rebuild with new Golang 3.6.1-5 - Rebuild with new Golang...
PT-2026-24455
Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 9.5.2-alpha.6 Parse Server versions prior to 8.6.19 Description Parse Server, an open source backend deployable on Node.js infrastructures, contains a flaw in its validation process for protected fields. The...
Parse Server 访问控制错误漏洞
Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that supports Node.js. Versions of Parse Server prior to 9.5.2-alpha.6 and 8.6.19 contain an access control vulnerability caused by a bypass of protected field validation, which may le...