57935 matches found
CVE-2026-14541
An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for...
GHSA-5P9G-J988-PCWV
creationtimestamp| type| source ---|---|--- 2026-07-31 02:31:09+00:00| seen| https://gist.github.com/alon710/eb7bbb63a594430d7d6ab18e1b915ebd...
CVE-2026-6890
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
GHSA-MMJF-RQRV-855V vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, promitor...
GHSA-64M9-QG9M-54W5 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-HVRP-RF83-W775 vulnerabilities
Vulnerabilities for packages: semgrep...
CVE-2026-14541
The CVE concerns Google mcp-toolbox version 1.4.0 in its Google OAuth provider component. If an authService is initialized with mcpEnabled: true but without an explicit audience or clientId, the ValidateMCPAuth pipeline for opaque tokens omits audience validation. This causes the toolbox to accep...
ECHO-0EA6-9825-F478
Bulletin has no description...
OPENSUSE-SU-2026:11410-1 cf-cli-8.18.4+git.0.3fcd823a1-1.1 on GA media
These are all security issues fixed in the cf-cli-8.18.4+git.0.3fcd823a1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-61893
The CVE-2026-61893 entry concerns the MZ Automation lib60870 library. A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer, indicating an out-of-bounds read in...
ECHO-81DC-CE3A-8510
Bulletin has no description...
ECHO-96FB-2D4B-2D17
Bulletin has no description...
ECHO-84D4-4C4E-BD16
Bulletin has no description...
ECHO-9C14-687D-5BF7
Bulletin has no description...
ECHO-C3E5-5E37-B99F
Bulletin has no description...
ECHO-CC9A-82CA-85AB
Bulletin has no description...
ECHO-1A9A-3A4D-D022
Bulletin has no description...
ECHO-2A2D-1197-24DC
Bulletin has no description...