68069 matches found
GHSA-F4QF-989F-24QQ vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17759 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17689 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RW7F-3QV6-GP4Q vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-HV4H-FF48-P67R vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XFJ2-R3X7-44MR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3XR2-3348-786H vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-4MR6-M6P5-PV62 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-42W5-9CQV-WQ6X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-47CH-8787-3HVH vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17556 Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The...
CVE-2026-17556 Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The...
GHSA-945V-V9P3-V5XW rclone local `--metadata` applies attacker-controlled mode/uid - setuid binary planted from an untrusted remote
Summary When writing an object with metadata, the local backend applies the source-supplied mode, uid, and gid verbatim: it parses mode as an octal integer and passes it straight into os.Chmodo.path, os.FileModeumode, and passes uid/gid straight into os.Chown. The value is never masked to...
CVE-2026-8183
creationtimestamp| type| source ---|---|--- 2026-08-05 20:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msecymdlna2t...
CVE-2026-9130
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...
CGA-92X5-JPJ2-28QR
Bulletin has no description...
CVE-2026-9130 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...
CVE-2026-9130 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...
CVE-2026-9130
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...
CVE-2026-9130
CVE-2026-9130 affects IBM Langflow OSS versions 1.0.0–1.10.3. The root cause is an authorization bypass in the MemoryComponent where session_id is used to filter messages without validating flow_id or user_id ownership, enabling cross‑user information disclosure. This impacts multi‑user deploymen...