GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-activemq-fips, kafbat-ui, zipkin, apache-activemq, apache-nifi-registry, kafbat-ui-fips, jenkins, camunda-zeebe, camunda, apache-camel-karavan-devmode...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-activemq-fips, kafbat-ui, zipkin, apache-activemq, apache-nifi-registry, kafbat-ui-fips, jenkins, camunda-zeebe, camunda, apache-camel-karavan-devmode...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-activemq-fips, kafbat-ui, zipkin, apache-activemq, apache-nifi-registry, kafbat-ui-fips, jenkins, camunda-zeebe, camunda, apache-camel-karavan-devmode...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-activemq-fips, kafbat-ui, zipkin, apache-activemq, apache-nifi-registry, kafbat-ui-fips, jenkins, camunda-zeebe, camunda, apache-camel-karavan-devmode...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-activemq-fips, kafbat-ui, zipkin, apache-activemq, apache-nifi-registry, kafbat-ui-fips, jenkins, camunda-zeebe, camunda, apache-camel-karavan-devmode...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-activemq-fips, kafbat-ui, zipkin, apache-activemq, apache-nifi-registry, kafbat-ui-fips, jenkins, camunda-zeebe, camunda, apache-camel-karavan-devmode...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-activemq-fips, kafbat-ui, zipkin, apache-activemq, apache-nifi-registry, kafbat-ui-fips, jenkins, camunda-zeebe, camunda, apache-camel-karavan-devmode...

NPM: Jodit has prototype pollution via Jodit.configure() / ConfigMerge

NPM: Jodit has prototype pollution via Jodit.configure / ConfigMerge vulnerability discovered by ? in WordPress Npm jodit versions 4.12.18...

Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot

Summary The ALLOWEDSOURCES configuration is meant to restrict which hosts Thumbor's HTTP loader may fetch images from. Plain-string entries in that list the overwhelming majority of real-world and documented configurations are passed directly to re.match without escaping. Because . is a regex...

CVE-2026-10686

Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing branches of ipv6routepacket subsys/net/ip were affected: the explicit-route path netroutepacket and the on-link cross-interface path netroutepacketif. Each set the packet...

CVE-2026-52855

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, config. placeholders in egg configuration-file templates allow a low-privileged user to read config.token, config.tokenid, and config.docker.registries from the full daemon...

EUVD-2026-51567

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings process memory. This issue is...

CVE-2026-52857 Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings process memory. This issue is...

CVE-2026-52857

CVE-2026-52857 affects Wings (Pterodactyl server control plane). Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings’ memory. This is fixed in version 1.13.0. Impact is Availability (O...