27838 matches found
CLSA-2025-1765411678 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.29-tuxcare.2...
CLSA-2025-1762906009 TuxCare security update for ch.qos.logback (4 CVEs)
TuxCare rebuilt 6 ch.qos.logback packages to address 4 CVEs. Fixed in 1.1.7-tuxcare.1...
CLSA-2025-1761523598 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.9...
CLSA-2025-1759795579 TuxCare security update for 4 packages (18 CVEs)
TuxCare rebuilt 4 packages to address 18 CVEs. Fixed in 9.0.83-tuxcare.1...
CLSA-2025-1751328209 TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1...
CLSA-2024-1727308813 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.31.tuxcare...
EUVD-2026-52689
Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit...
MAL-2026-11719 Malicious code in @or-sdk/permissions-lambda (npm)
npm/@or-sdk/permissions-lambda is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @onereach/si-merge-tag-input (npm)
npm/@onereach/si-merge-tag-input is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
RHSA-2026:47057 Red Hat Security Advisory: nodejs:24 security update
Bulletin has no description...
K000162755: Node.js CVE-2026-48937
Security Advisory Description A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24. CVE-2026-48937 Impact There is no impact; F5 products are not affected b...
CVE-2026-14939
The Visualizer WordPress plugin is affected: versions before 4.0.6 expose a vulnerability where an attacker with Contributor-level access can supply a URL that is not validated to safe address ranges, enabling server-side requests (SSRF) to link-local instance-metadata endpoints. The fetched resp...
EUVD-2026-52569
A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...
CVE-2026-6837
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...
CVE-2026-6837
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...
CVE-2026-58045
A flaw in Node.js allows a spoofed TypedArray byteLength to trigger a reachable assertion in the synchronous node:zlib APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected. Repeated exploitation of this condition can result in a denial of service. This...
ALPINE-CVE-2026-58045
A flaw in Node.js allows a spoofed TypedArray byteLength to trigger a reachable assertion in the synchronous node:zlib APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected. Repeated exploitation of this condition can result in a denial of service. This...
[SECURITY] Fedora 44 Update: nebula-1.11.0-1.fc44
A scalable overlay networking tool with a focus on performance, simplicity and security...
CVE-2026-58042
Affected software: Node.js 22.x, 24.x, and 26.x. Vulnerability: dns.resolveAny() can cause the Node.js process to abort when a DNS response contains more than 256 A records. Repeated triggering may lead to a denial of service. Root cause/impact: The flaw in dns.resolveAny() leads to process termi...
