Prototype Pollution

Overview livewire/livewire is an A front-end framework for Laravel. Affected versions of this package are vulnerable to Prototype Pollution in the client-side state handling process. An attacker can execute arbitrary JavaScript in the context of the affected application by tricking a user into...

CVE-2025-15489 Passster < 4.2.24 - Password Protection Bypass

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

USN-8713-1: BioSig vulnerabilities

Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-22891, CVE-2026-20777...

USN-8713-1 biosig vulnerabilities

Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-22891, CVE-2026-20777...

CVE-2026-73476

Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...

OPENSUSE-SU-2026:21788-1 Security update for lxd

This update for lxd fixes the following issues: Changes in lxd: - update to 5.21.6: bsc1274937, CVE-2026-63293, bsc1274936, CVE-2026-62420, bsc1274954, CVE-2026-63295, bsc1274963, CVE-2026-63297, bsc1274961, CVE-2026-63296, bsc1275085, CVE-2026-63299, bsc1275084, CVE-2026-63298, bsc1275090,...

CVE-2026-73476 External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098

Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...

RLSA-2026:61377 Important: nodejs24 security, bug fix, and enhancement update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

SUSE CVE-2026-72364

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the error handling in writebackiter loop. If an error occurs, writebackiter needs to be called again with error set to the error so that it can clean up iteration state. Further, the curren...

CVE-2026-84357

An improper input validation flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523208474 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produc...

PT-2026-84812

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description An issue exists involving the improper checking or handling of exceptional conditions. This relates to Common Weakness Enumeration CWE CWE-703, which occurs when a program does...

PT-2026-86456

Name of the Vulnerable Software and Affected Versions RouterOS versions prior to 6.49.21 Long-term RouterOS versions prior to 7.23.4 Long-term RouterOS versions prior to 7.24.2 Stable Description An argument-handling flaw exists in the SSH login path. By using a username that begins with a...

RHEL 8 : nodejs:22 (RHSA-2026:62219)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62219 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

RHEL 8 : nodejs:24 (RHSA-2026:62583)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62583 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

ROS-20260902-73-0017

The vulnerability of the Repo.archive function in the Python library for interacting with Git repositories in GitPython is related to improper external handling of file names or paths when processing the unsafegitarchiveoptions parameter. Exploiting this vulnerability may allow a remote attacker ...

Spring Security CVE-2026-22732 Detection / Remediation Tool

This OpenRewrite tool detects Java projects susceptible to CVE-2026-22732 in Spring Security and provides automated remediation recipes. It identifies affected Spring Security versions and response handling patterns that can cause security headers to be omitted, and can remediate affected project...

ALSA-2026:62583 Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...

WebNN Component Confidential Data Access

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

CVE-2026-84372

Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, pipeline handling on aggregate cluster and replication connections reparses an already serialized RESP buffer in AbstractAggregateConnection::write by splitting it with...