76 matches found
scorecard
OpenSSF Scorecard...
CVE-2020-15227
CVE-2020-15227 免责声明！我不对在真实环境中使用它承担任何责任，所以请勿这样做。这个工具仅用于演示和为系统管理员提供测试 此工具用于检测 nette/application 中的漏洞。 如何修复漏洞 Composer 将依赖更新到最新版本。 nette/application =3.0.6 nette/application =2.4.16 nette/application =2.3.14 nette/application =2.2.10 nette/nette = 2.1.13 nette/nette = 2.0.19 将新依赖...
ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root
Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...
CVE-2026-88884 Renovate before 44.3.1 Authentication Bypass via Digest Updates
Renovate is a dependency update automation tool. In versions before 44.3.1 and Mend Renovate CE/EE images before 15.4.0, mend-renovate-ce Helm chart before 15.4.0, mend-renovate-enterprise-edition Helm chart before 10.4.0, digest updates are not subject to the internal minimumReleaseAge stability...
CVE-2026-88881
Renovate versions before 44.11.3 are vulnerable to credential exfiltration when following pagination links in the HTTP Link header. The root cause is that the pagination URL returned by a GitHub server is not validated against the originally contacted host, allowing a malicious or compromised ser...
react-CVE-2025-55182-fixer
React Server Components セキュリティ PR 自動化 このリポジトリは、CVE-2025-55182 の影響を受けるリポジトリに対して、脆弱なバージョンのreact-server-dom- および関連する React パッケージを自動的にアップグレードし、プルリクエスト PR を作成するスクリプトを提供します。 このツールの機能 リポジトリの package.json から影響を受ける react-server-dom-、react、react-dom、next のバージョンをスキャンします。 必要に応じて、それらを安全で修正済みのバージョンにアップグレードします。...
CVE-2026-87056
A flaw was found in operator-sdk-builder. The repository lacks automated dependency-update configurations for its git submodules, Containerfile base image, and Tekton bundle references. This absence prevents the automatic flagging of stale or vulnerable dependencies. Consequently, this could lead...
Security update for cadvisor (important)
openSUSE security update: security update for cadvisor ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21786-1 Rating: important References: bsc1266645 bsc1276727 Cross-References: CVE-2026-39821 CVE-2026-41178 CVSS scores: CVE-2026-39821 SUSE : 7.4...
CLEANSTART-2026-UX51846 Security fixes in renovate 44.31.0-r2
Package renovate version 44.31.0-r2 fixes 21 vulnerabilities: CVE-2026-59873, CVE-2026-59871, CVE-2026-59875, CVE-2026-59874, ghsa-r292-9mhp-454m...
CLEANSTART-2026-DD38104 Security fixes in renovate 43.250.0-r1
Package renovate version 43.250.0-r1 fixes 1 vulnerabilities: CVE-2026-59873...
CLEANSTART-2026-XT48985 Security fixes in rancher-agent 2.12.11-r1
Package rancher-agent version 2.12.11-r1 fixes 18 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-53489, CVE-2026-46680, CVE-2026-53488...
CLEANSTART-2026-PY30601 Security fixes in langfuse-worker 3.214.0-r1
Package langfuse-worker version 3.214.0-r1 fixes 28 vulnerabilities: ghsa-frvp-7c67-39w9, ghsa-p63j-vcc4-9vmv, ghsa-55q2-fjhq-7xh7, ghsa-c2j3-45gr-mqc4, CVE-2026-69192...
OPENSUSE-SU-2026:21670-1 Security update for cloudflared
This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.8.2 Update vendor archive to fix github.com/go-chi/chi/v5 boo1276196, CVE-2026-72815, CVE-2026-72816, CVE-2026-72817 Add OpenRC support Migrate config renovate.json Fix bugs...
SUSE SLED15 / SLES15 Security Update : runc (SUSE-SU-2026:3787-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3787-1 advisory. This update for runc rebuilds it against the current go security release. Tenable has extracted the preceding descripti...
OPENSUSE-SU-2026:21663-1 Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.98.0: chore: fix extra whitespace Default Codespaces port forwarding to loopback Bump gh-aw-actions to v0.87.1 and recompile workflows Fix issue triage action compatibility choredeps: bump golang.org/x/crypto from...
CVE-2024-58377
...
CVE-2024-58377 Nokogiri before 1.16.5 libxml2 Dependency Update
Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...
CVE-2024-58377
Nokogiri versions before 1.16.5 bundle libxml2 2.12.6 , which is affected by CVE-2024-34459 in the xmllint tool. The underlying issue is an uncontrolled search path element : an attacker can potentially influence the search path used for external libraries by manipulating environment variables or...