5994 matches found
GHSA-9G5Q-2W5X-HMXF vulnerabilities
Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, telegraf, karma...
GHSA-PGGX-2V9R-J6GM vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-R28C-9Q8G-F849 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, authentik-fips, langfuse-fips, semaphore, keep-fips, homepage, langfuse, librechat, gitlab-rails-ce-fips, authentik, cadence-web, nextcloud-server, unleash-fips, unleash, arangodb, keep, pelias-api, gitlab-rails-ce, vitess...
GHSA-HPCC-26XQ-25FV vulnerabilities
Vulnerabilities for packages: spark, spark-fips, opensearch, strimzi-kafka-operator, apache-hop-fips, apache-hop, opensearch-fips, camunda-zeebe, strimzi-kafka-operator-fips, camunda...
ROOT-APP-NPM-GHSA-3875-8GCX-7V46 GHSA-3875-8gcx-7v46 in @rootio/n8n - Patched by Root
Root has patched GHSA-3875-8gcx-7v46 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
GHSA-6M8F-W97W-99H7
creationtimestamp| type| source ---|---|--- 2026-07-27 11:51:46+00:00| seen| https://gist.github.com/Correctover/e98078382935c28832271fc5a8e21606...
GHSA-44JH-J22R-33WQ
creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:30+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-27 00:01:06+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-28 01:00:05+00:00| published-proof-of-concept| https://t.me/EchelonEyes/1200 2026-07-29 00:00:52+00:00|...
GHSA-2RMR-XW8M-22Q9
creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:19+00:00| seen| https://t.me/EchelonEyes/2145 2026-07-27 00:00:55+00:00| seen| https://t.me/EchelonEyes/2145 2026-07-28 00:00:31+00:00| published-proof-of-concept| https://t.me/EchelonEyes/2145...
GHSA-GPFC-H59V-63CV
creationtimestamp| type| source ---|---|--- 2026-07-25 17:51:14+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrigld2ef32d...
GHSA-3R53-75J5-3G7J
creationtimestamp| type| source ---|---|--- 2026-07-25 06:31:04+00:00| seen| https://gist.github.com/alon710/31362352a2fade2501771882d0062b85...
GHSA-RX9V-2FJR-MHX5 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...
GHSA-3PJW-73GF-8QR5 vulnerabilities
Vulnerabilities for packages: akhq, nacos-docker, spark, lmcache-cuda-12.8, spark-fips, opensearch, wso2is, apache-nifi, hadoop-fips, opensearch-fips, elasticsearch, flyway, sonarqube, elasticsearch-fips, jenkins...
GHSA-3WP3-XXJ9-5JQQ
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...
@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.0.0, <=19.0.1)
react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...
@adobe/aem-cli (>=16.21.1, <=16.21.6), @adobe/helix-docx2md (>=1.9.29, <=1.9.31) +97 more potentially affected by CVE-2026-73643 via js-yaml (>=5.0.0, <=5.2.1)
js-yaml NPM version =5.0.0, =16.21.1, =1.9.29, =6.29.8, =3.4.141, =7.1.20, =2.2.62, =1.5.3, =0.0.1-alpha.0, =1.0.8, =0.1.2, =0.11.0, =5.7.5, =7.0.2 - @davidsneighbour/markdownlint-config 2026.0.5 - @depup/nestjsswagger 11.4.6-depup.1 - @devicerail/yaml-adapter 0.1.0 and more Source cves:...
@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.6), @aaravpos/appointment-booking-plugin (>=1.0.1, <=8.0.2) +274 more potentially affected by unknown CVE via react-router (>=7.12.0, <=7.18.1)
react-router NPM version =7.12.0, =1.0.0, =1.0.1, =0.0.9-alpha-20260107202750-16b04dcbaa92c7fc2bbb580dbc1da723c76a5225, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...
Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)
Summary Remote Code Execution RCE in velocityjs v2.1.6 via property-read to the Function constructor. This bypasses the fix for GHSA-j658-c2gf-x6pq "Prototype Pollution in set path assignment" — that advisory blocked constructor/proto/prototype only in the set assignment handler set.cjs, but...
@agent-native/core (>=0.26.5, <=0.157.8), @agent-native/skills (>=0.2.9, <=0.2.558) +224 more potentially affected by CVE-2026-67327 via better-auth (>=1.1.3, <=1.6.21)
better-auth NPM version =1.1.3, =0.26.5, =0.2.9, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.0.7, =0.1.4 and more Source cves: CVE-2026-67327 Source advisory: OSV:GHSA-QQ9H-G4JM-XGF3...