84631 matches found
ROOT-OS-DEBIAN-11-CVE-2026-44690 CVE-2026-44690 in unbound - Patched by Root
Root has patched CVE-2026-44690 in the unbound package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-32665 CVE-2026-32665 in unbound - Patched by Root
Root has patched CVE-2026-32665 in the unbound package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-40622 CVE-2026-40622 in unbound - Patched by Root
Root has patched CVE-2026-40622 in the unbound package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-50252 CVE-2026-50252 in unbound - Patched by Root
Root has patched CVE-2026-50252 in the unbound package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-42944 CVE-2026-42944 in unbound - Patched by Root
Root has patched CVE-2026-42944 in the unbound package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-33278 CVE-2026-33278 in unbound - Patched by Root
Root has patched CVE-2026-33278 in the unbound package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root
Root has patched CVE-2026-55973 in the unbound package for Root:Debian:11. Multiple fixed versions available...
DEBIAN-CVE-2026-82854
Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...
DEBIAN-CVE-2026-82853
Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...
DEBIAN-CVE-2026-82662
Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...
DEBIAN-CVE-2026-82659
nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw message...
DEBIAN-CVE-2026-81624
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
DEBIAN-CVE-2026-82661
Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers. An attacker with control over list..comment parameters can inject CRLF sequences to create additional headers in generated RFC822...
DEBIAN-CVE-2026-82660
Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport. Attackers can read local files or fetch URLs by supplying path or href values in message content fields, bypassing intended access controls...
ROOT-OS-DEBIAN-11-CVE-2026-59856 CVE-2026-59856 in vim - Patched by Root
Root has patched CVE-2026-59856 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-52860 CVE-2026-52860 in vim - Patched by Root
Root has patched CVE-2026-52860 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-46483 CVE-2026-46483 in vim - Patched by Root
Root has patched CVE-2026-46483 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-73074 CVE-2026-73074 in vim - Patched by Root
Root has patched CVE-2026-73074 in the vim package for Root:Debian:11. Multiple fixed versions available...