311 matches found
GHSA-7RP8-R62P-Q6WC vulnerabilities
Vulnerabilities for packages: dl, apply-cve-bump, wolfictl, cg...
CVE-2026-29049 vulnerabilities
Vulnerabilities for packages: dl, apply-cve-bump, wolfictl, cg...
cg (>=1.0.0b2, <=16.3.4) potentially affected by CVE-2022-1592 via scout-browser (>=4.24.0, <=4.51.0)
scout-browser PYPI version =4.24.0, =1.0.0b2, =16.3.4 Source cves: CVE-2022-1592 Source advisory: OSV:PYSEC-2026-750...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: buildah-fips, kaf, docker-fips, argo-workflows-fips, go-discover-fips, gitlab-pages, crossplane-provider-aws-emr, crossplane-provider-aws-sagemaker-fips, crossplane-provider-aws-firehose-fips, crossplane-provider-azure-powerbidedicated, openbao, datadog-agent-fips,...
CVE-2026-57876
An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit this vulnerability by sending a...
MINI-22CM-JR63-CG4R
Bulletin has no description...
arthexis (>=0.1.3, <=2.0.0), cdm-ecommerce-backend (0.1.0) +70 more potentially affected by CVE-2026-35193 via django (>=5.2.0, <=5.2.14)
django PYPI version =5.2.0, =0.1.3, =8.6.0, =0.32.0, =8.9.21, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =2025.7.38 - django-factory-all 0.1.2 and more Source cves: CVE-2026-35193 Source advisory: OSV:PYSEC-2026-197...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: nfpm, gomplate-fips, flux-image-automation-controller, argo-workflows-fips, tfsec, packer-fips, coder, grafana-fips, pulumi-language-dotnet, trufflehog, kargo, dagger, flux-fips, skaffold-fips, kaniko-fips, argo-events-fips, cerbos, chainloop-cli-fips, mapotf-fips,...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: netconsole: The sumutex should be acquired before navigating the configs hierarchy. There is a race between operations that iterate over the cgchildren list and concurrent additions/removals of userdata items through configfs. Th...
GHSA-7C37-GX6W-8VC5 vulnerabilities
Vulnerabilities for packages: cg...
GHSA-7RMH-48MX-2VWC vulnerabilities
Vulnerabilities for packages: cg...
CVE-2026-44310 vulnerabilities
Vulnerabilities for packages: cg...
CVE-2026-44309 vulnerabilities
Vulnerabilities for packages: cg...
GHSA-M3XC-H892-GGX6 vulnerabilities
Vulnerabilities for packages: amazon-ssm-agent, gitlab-rails-ce, gitlab-rails-ce-fips, chainloop-cli, packer, scorecard, seaweedfs-rocksdb-fips, packer-fips, rclone-fips, grafana-fips, kyverno, flux, nemo, cerbos-fips, upwind-agent, cg, syft-fips, skaffold-fips, flux-fips, kyverno-fips,...
CVE-2026-44740 vulnerabilities
Vulnerabilities for packages: amazon-ssm-agent, gitlab-rails-ce, gitlab-rails-ce-fips, chainloop-cli, packer, scorecard, seaweedfs-rocksdb-fips, packer-fips, rclone-fips, grafana-fips, kyverno, flux, nemo, cerbos-fips, upwind-agent, cg, syft-fips, skaffold-fips, flux-fips, kyverno-fips,...
CVE-2026-41507 Remote Code Execution (RCE) via String Literal Injection into math-codegen
math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse is injected verbatim into a new Function body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the...
arthexis (>=0.1.3, <=2.0.0), cdm-ecommerce-backend (0.1.0) +67 more potentially affected by CVE-2026-6907 via django (>=5.2.0, <=5.2.13)
django PYPI version =5.2.0, =0.1.3, =8.6.0, =0.32.0, =8.9.21, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =2025.7.38 - django-factory-all 0.1.2 and more Source cves: CVE-2026-6907 Source advisory: OSV:PYSEC-2026-55...
GHSA-P6X5-P4XF-CC4R Remote Code Execution (RCE) via String Literal Injection into math-codegen
Impact String literal content passed to cg.parse is injected verbatim into a new Function body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the parser. Any application exposing a math evaluation endpoint where user input flo...
arthexis (>=0.1.3, <=2.0.0), cdm-ecommerce-backend (0.1.0) +67 more potentially affected by CVE-2026-33034 via django (>=5.2.0, <=5.2.12)
django PYPI version =5.2.0, =0.1.3, =8.6.0, =0.32.0, =8.9.21, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =2025.7.38 - django-factory-all 0.1.2 and more Source cves: CVE-2026-33034 Source advisory: GHSA-933H-HP56-HF7M...