199569 matches found
GO-2026-5968 melange: Incomplete package integrity verification allows data section substitution in chainguard.dev/apko
melange: Incomplete package integrity verification allows data section substitution in chainguard.dev/apko...
CVE-2026-49852
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.6.8, joserfc.jwt.decode accepts attacker-forged HMAC-signed tokens when the caller-supplied verification key is the empty string or None, because HMACAlgorithm.sign...
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issue in Aurora PostgreSQL using the AWS Advanced JDBC Wrapper Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege...
plone.restapi: Stored XSS by spoofing mime type
Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...
CVE-2026-47870
creationtimestamp| type| source ---|---|--- 2026-07-17 16:15:18+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 12:01:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqw7rnnoqs23...
CVE-2026-47869
creationtimestamp| type| source ---|---|--- 2026-07-17 16:15:12+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvz2xjjh42f 2026-07-18 12:16:36+00:00| seen|...
CVE-2026-47868
creationtimestamp| type| source ---|---|--- 2026-07-17 16:15:09+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvz2qynrv2w 2026-07-18 12:11:35+00:00| seen|...
CVE-2026-47866
creationtimestamp| type| source ---|---|--- 2026-07-17 16:03:47+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mqu4ttfbde2i 2026-07-17 16:15:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:00:35+00:00| seen|...
CVE-2026-15343 Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...
GHSA-36HH-V3QG-5JQ4 vulnerabilities
Vulnerabilities for packages: py3-xet-core...
GHSA-5G35-5JRJ-F39P vulnerabilities
Vulnerabilities for packages: perl...
GHSA-PH5F-PJVP-H9X6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MC7H-7X47-9J48 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F3VQ-GJQX-3PG9 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-25XW-CF43-5CCV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-CHGR-C6PX-7XPP vulnerabilities
Vulnerabilities for packages: py3-xet-core...
GHSA-FF9G-85JQ-R3G3
creationtimestamp| type| source ---|---|--- 2026-07-17 14:00:06+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317 2026-07-18 00:00:29+00:00| published-proof-of-concept| https://t.me/bdufstecru/3317...
CVE-2026-9602
Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...
EUVD-2026-45161
A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can...