fusionauth-samlv2

fusionauth-samlv2 This repository is SAML v2.0 bindings in Java using JAXB. You'd use this library to process SAML requests and responses. See the tests for example code. Security disclosures If you find a vulnerability or other security related bug, please report the vulnerability here before...

CVE-2026-115929

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

CVE-2026-115929 MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

CVE-2026-115929 MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

EUVD-2026-109208

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

CVE-2026-115929

MongoDB Compass is affected by a vulnerability involving its dependency on the Electron runtime. The Electron TLS root certificate store contains recoverable eMudhra intermediate CA certificates , which can lead to improper certificate validation. This issue is resolved by updating to Compass 1.5...

MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

PT-2026-122409

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...

crawlstudio (>=0.1.0, <=0.1.1), iflow-mcp-prospectio-api-mcp (0.1.0) +7 more potentially affected by CVE-2026-115508 via crawl4ai (>=0.7.4, <=0.9.2)

crawl4ai PYPI version =0.7.4, =0.1.0, =0.17.0, =0.3.0, =0.5.0, =0.4.0, =0.4.0, =0.6.4 Source cves: CVE-2026-115508 Source advisory: SNYK:PYTHON-CRAWL4AI-21693566...

CVE-2026-113870

MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that view for editing, the values can cause arbitrary code to execute with t...

EUVD-2026-107468

MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that view for editing, the values can cause arbitrary code to execute with t...

CVE-2026-113870 Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing

MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that view for editing, the values can cause arbitrary code to execute with t...

CVE-2026-113870 Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing

MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that view for editing, the values can cause arbitrary code to execute with t...

CVE-2026-113870

MongoDB Compass is vulnerable to arbitrary code execution due to improper escaping of certain BSON values when converting a stored view’s aggregation pipeline into an editable source. An attacker can trigger this by providing a specially crafted view within a MongoDB deployment. If a user connect...

Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing

MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that view for editing, the values can cause arbitrary code to execute with t...

ROS-20261021-73-0061

The vulnerability in MongoDB-Compass is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2026-120770

MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that view for editing, the values can cause arbitrary code to execute with t...

crawlstudio (>=0.1.0, <=0.1.1), iflow-mcp-prospectio-api-mcp (0.1.0) +7 more potentially affected by CVE-2026-109238 via crawl4ai (>=0.7.4, <=0.9.2)

crawl4ai PYPI version =0.7.4, =0.1.0, =0.17.0, =0.3.0, =0.5.0, =0.4.0, =0.4.0, =0.6.4 Source cves: CVE-2026-109238 Source advisory: SNYK:PYTHON-CRAWL4AI-21693569...

COMPASS: Membership Inference Attack against Vision Large Language Models Via Adaptive Noise Calibration

Vision large language models VLLMs are deployed in privacy-sensitive domains, raising training-data exposure concerns. Existing gray-box membership inference attacks MIAs commonly rely on entropy statistics or generated descriptions, requiring costly generation with limited membership separation...

MongoDB Compass Unauthorized Access

The vulnerability of MongoDB Compass’s graphical interface, a database management system for MongoDB, is related to improper code generation practices. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...