35892 matches found
Fedora 44 : composer (2026-9b34a78e81)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b34a78e81 advisory. Version 2.10.1 - 2026-06-04 Security: Fixed shell escaping when opening an editor 12903 Security: Verify backup phar signature before restoring it when using...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack inadequate validation of symlink targets in the file access process. An attacker can access or modify files outside of the intended user scope by creating or leveraging symbolic links that point to locations beyond the...
CVE-2026-46672
creationtimestamp| type| source ---|---|--- 2026-06-12 20:16:24+00:00| published-proof-of-concept| https://github.com/actualbudget/actual/security/advisories/GHSA-7gh7-258j-4mpq...
Missing Authorization
Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to Missing Authorization via the buildSchema controller. An attacker can modify schema metadata and automation trigger output schema by sending unauthenticated requests to the affected endpoint,...
OPENSUSE-SU-2026:20963-1 Security update for neonmodem
This update for neonmodem fixes the following issues: Changes in neonmodem: - Update golang.org/x/net dependency to v0.55.0 due to bsc1267193 - Update golang.org/x/image dependency to v0.38.0 due to bsc1260727 - Update golang.org/x/term dependency to v0.42.0 due to bsc1260727 - Update to version...
CVE-2026-55448
creationtimestamp| type| source ---|---|--- 2026-06-12 17:40:16+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-29hf-rm4x-xxph 2026-06-26 18:36:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7lljtyfl2l...
CVE-2026-33646
creationtimestamp| type| source ---|---|--- 2026-06-12 15:56:16+00:00| published-proof-of-concept| https://github.com/jdx/mise/security/advisories/GHSA-fjj5-v948-whjj 2026-06-26 19:05:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7na4xe2m2c...
Malicious code in web-model-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c385c177531c421e5a49f41d931890a48c16c921b23cc20f2bf4cd8fae893 On npm install, postinstall.js sends an HTTPS POST to https://ddactic-lab.online/sc/beacon carrying the package name/version, Node version, OS,...
MAL-2026-5697 Malicious code in web-model-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c385c177531c421e5a49f41d931890a48c16c921b23cc20f2bf4cd8fae893 On npm install, postinstall.js sends an HTTPS POST to https://ddactic-lab.online/sc/beacon carrying the package name/version, Node version, OS,...
GHSA-R8F8-4PGH-4M8V vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-50230
creationtimestamp| type| source ---|---|--- 2026-06-12 02:49:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-50230.yaml...
GHSA-68C4-77CF-437J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7X6F-897Q-8H7J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-855R-9WVC-25GH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JMPJ-8P4W-J5RQ vulnerabilities
Vulnerabilities for packages: chromium...
OPENSUSE-SU-2026:11011-1 golang-github-prometheus-alertmanager-0.32.2-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-alertmanager-0.32.2-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-33760
creationtimestamp| type| source ---|---|--- 2026-06-11 19:53:35+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-9c59-2mvc-vfr8 2026-07-01 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpld4xhnma2e...
GHSA-F5VX-F6JP-89J6 vulnerabilities
Vulnerabilities for packages: openssl...