2708 matches found
CVE-2026-55415 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54654 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55403 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-RFR2-MQ9M-X2QX vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-VX7X-VCC2-C44G vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54621 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54690 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55389 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54653 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-5578-W22F-PFX9 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-J884-Q54Q-MMX3 vulnerabilities
Vulnerabilities for packages: label-studio...
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
SummaryThe administrator-configured WEBFETCHFILTERLIST the allow/block list applied to server-side web fetches: RAG URL ingestion, URL-to-markdown, web-search content fetch matches hostnames incorrectly, so the filter can be bypassed. Detailsisstringallowed backend/openwebui/utils/misc.py matches...
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: Update golang.org/x/net to v0.57.0...
K000162731: Linux kernel vulnerability CVE-2026-63793
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol-volumelabel with a mutex and snaphost the label before copytouser. This prevent a use-after-free when FSIOCSETFSLABEL replaces the vol-volumelabel an...
CVE-2026-67293
FreeRDP before 3.29.0 affected versions = 3.28.0 contains an improper certificate hostname validation vulnerability. The TLS hostname matcher tlsmatchhostname in libfreerdp/crypto/tls.c treats a wildcard pattern such as .example.com as matching any hostname ending in .example.com, so it incorrect...
CVE-2026-67293
FreeRDP before 3.29.0 affected versions = 3.28.0 contains an improper certificate hostname validation vulnerability. The TLS hostname matcher tlsmatchhostname in libfreerdp/crypto/tls.c treats a wildcard pattern such as .example.com as matching any hostname ending in .example.com, so it incorrect...
UBUNTU-CVE-2026-67293
FreeRDP before 3.29.0 affected versions = 3.28.0 contains an improper certificate hostname validation vulnerability. The TLS hostname matcher tlsmatchhostname in libfreerdp/crypto/tls.c treats a wildcard pattern such as .example.com as matching any hostname ending in .example.com, so it incorrect...
CVE-2026-67293 FreeRDP before 3.29.0 Improper Certificate Hostname Validation
FreeRDP before 3.29.0 affected versions = 3.28.0 contains an improper certificate hostname validation vulnerability. The TLS hostname matcher tlsmatchhostname in libfreerdp/crypto/tls.c treats a wildcard pattern such as .example.com as matching any hostname ending in .example.com, so it incorrect...
EUVD-2026-51860
FreeRDP before 3.29.0 affected versions = 3.28.0 contains an improper certificate hostname validation vulnerability. The TLS hostname matcher tlsmatchhostname in libfreerdp/crypto/tls.c treats a wildcard pattern such as .example.com as matching any hostname ending in .example.com, so it incorrect...