26817 matches found
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-69097 via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-69097 Source advisory: OSV:GHSA-3RP5-JJMW-4WV2...
GHSA-P2F4-R6V6-J797 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Summary In electron-builder's builder-util-runtime package, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization". Other credential-bearing headers — most notably PRIVATE-TOKEN used by GitLab's...
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Summary In electron-builder's builder-util-runtime package, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization". Other credential-bearing headers — most notably PRIVATE-TOKEN used by GitLab's...
bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-67322 via gitpython (2.1.3)
gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-67322 Source advisory: OSV:GHSA-RWJ8-PGH3-R573...
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-67322 via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-67322 Source advisory: OSV:GHSA-RWJ8-PGH3-R573...
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-67323 via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-67323 Source advisory: OSV:GHSA-956X-8GVW-WG5V...
bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-67323 via gitpython (2.1.3)
gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-67323 Source advisory: OSV:GHSA-956X-8GVW-WG5V...
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-67325 via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-67325 Source advisory: OSV:GHSA-2F96-G7MH-G2HX...
bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-67325 via gitpython (2.1.3)
gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-67325 Source advisory: OSV:GHSA-2F96-G7MH-G2HX...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards-fips, lerna, opensearch-dashboards, kibana, wazuh-dashboard, gitlab-rails-ce-fips, pulumi, npm, sqlpad, homepage, tensorflow-gpu-jupyter, graalvm, code-server, jupyter-base-notebook, kubeflow-centraldashboard, wazuh-dashboard-fips,...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards-fips, lerna, opensearch-dashboards, kibana, wazuh-dashboard, gitlab-rails-ce-fips, pulumi, npm, sqlpad, homepage, graalvm, code-server, jupyter-base-notebook, kubeflow-centraldashboard, wazuh-dashboard-fips, actions-runner, gitlab-rails-ce,...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards-fips, lerna, opensearch-dashboards, kibana, wazuh-dashboard, gitlab-rails-ce-fips, pulumi, npm, sqlpad, tensorflow-gpu-jupyter, graalvm, code-server, jupyter-base-notebook, kubeflow-centraldashboard, wazuh-dashboard-fips, actions-runner,...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: saf, opensearch-dashboards-fips, lerna, opensearch-dashboards, kibana, wazuh-dashboard, gitlab-rails-ce-fips, pulumi, npm, sqlpad, homepage, tensorflow-gpu-jupyter, graalvm, code-server, jupyter-base-notebook, kubeflow-centraldashboard, wazuh-dashboard-fips,...
CVE-2026-54466 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips...
GHSA-MP7J-QC5W-4988 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips...
CVE-2026-54490 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips...
GHSA-XV26-6W52-CPH6 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce, argo-workflows, gitlab-rails-ce-fips...
CVE-2026-53715 vulnerabilities
Vulnerabilities for packages: tigera-operator, gitlab-operator-fips, datadog-agent-fips, tigera-operator-fips, datadog-agent, gitlab-operator...