34249 matches found
GHSA-45PQ-889G-FCGH vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-4964 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-49980 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-4VR5-P2GC-H23P vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-41179 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-59733 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-8V25-V8P6-QF7V vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-FPMH-VX4H-XC33 OpenAM Insecure SSO Cookie Initialization
Summary Description An Insecure Default Initialization of Resource CWE-1188 issue in the OpenAM default configuration ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false. Also, the iPlanetDirectoryPro SSO cookie is used as a CSRF token in OAuth/OIDC flows. This affects OpenAM Community...
Insecure Randomness
Spring AMQP is vulnerable to Predictable Correlation Identifier vulnerability as per NVD Description or CWE-330. The vulnerability is due to correlation IDs for RabbitTemplate.sendAndReceive replies being generated using a predictable internal counter, which allows an attacker to predict...
Insecure Temporary File
Spring Boot is vulnerable to Insecure Temporary File. The vulnerability is due to the use of a predictable static directory for the embedded Artemis broker's data, which allows a local attacker to pre-create or replace the directory with a symlink and potentially redirect broker file operations t...
CVE-2026-19870
The CVE-2026-19870 entry concerns Roskus Prospero Flow CRM (vendor Roskus) prior to version 5.15.10. It is an IDOR in the payroll module where authenticated users with read payroll permission can view salary and banking details of employees from other companies, and users with create payroll perm...
Insecure Trusted-Package Validation
Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...
GO-2026-5596 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2022-0587 vulnerabilities
Vulnerabilities for packages: opa...
GO-2026-4962 vulnerabilities
Vulnerabilities for packages: mattermost, mattermost-fips...
GO-2024-2860 vulnerabilities
Vulnerabilities for packages: goreleaser...
GO-2026-5585 vulnerabilities
Vulnerabilities for packages: gatus, versitygw, versitygw-fips, gatus-fips...
GO-2025-3842 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...