2856 matches found
Malicious code in @emerald-react/label (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6f30b4a300f830a4993ada9e4bc86256a5650fe730611b87b9ec31304f4c90 The package @emerald-react/label was found to contain malicious code...
MAL-2026-1613 Malicious code in @emerald-react/label (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6f30b4a300f830a4993ada9e4bc86256a5650fe730611b87b9ec31304f4c90 The package @emerald-react/label was found to contain malicious code...
CVE-2026-32274 vulnerabilities
Vulnerabilities for packages: nemo, label-studio, open-webui, kserve...
GHSA-3936-CMFR-PM3M vulnerabilities
Vulnerabilities for packages: nemo, label-studio, open-webui, kserve...
GHSA-752W-5FWX-JX9F vulnerabilities
Vulnerabilities for packages: pgadmin4-fips, ggshield, vllm-openai-cuda-12.9, py3-cassandra-medusa, open-webui, authentik, airflow-core, label-studio, az, kserve, request-1276, superset, metaflow-service-fips, datadog-agent, datadog-agent-fips, authentik-fips, keep, dbt-snowflake, litellm, airflo...
CVE-2026-32597 vulnerabilities
Vulnerabilities for packages: pgadmin4-fips, ggshield, vllm-openai-cuda-12.9, py3-cassandra-medusa, open-webui, authentik, airflow-core, label-studio, az, kserve, request-1276, superset, metaflow-service-fips, datadog-agent, datadog-agent-fips, authentik-fips, keep, dbt-snowflake, litellm, airflo...
EulerOS 2.0 SP12 : libwebsockets (EulerOS-SA-2026-1373)
According to the versions of the libwebsockets package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Stack-based Buffer Overflow in lwsadnsparselabel in warmcat libwebsockets allows, when the LWSWITHSYSASYNCDNS flag is enabled during...
Huawei EulerOS: Security Advisory for libwebsockets (EulerOS-SA-2026-1404)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : libwebsockets (EulerOS-SA-2026-1585)
According to the versions of the libwebsockets package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use After Free vulnerability exists in the WebSocket server implementation in lwshandshakeserver in warmcat libwebsockets. In specific...
Oracle Linux 9 : gnutls (ELSA-2026-50149)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50149 advisory. - Fix PKCS11 token initialization label overflow CVE-2025-9820 Tenable has extracted the preceding description block directly from the Oracle Linux...
Oracle Linux 9 : gnutls (ELSA-2026-4188)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-4188 advisory. - Fix PKCS11 token initialization label overflow CVE-2025-9820 Tenable has extracted the preceding description block directly from the Oracle Linux...
UBUNTU-CVE-2026-1663
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with group import permissions to create labels in private projects due to improper authorization validation in th...
CVE-2026-1663 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with group import permissions to create labels in private projects due to improper authorization validation in th...
📄 BuptLab DNS Relay Server 1.0 Denial of Service
A remote denial of service vulnerability exists in BuptLab DNS Relay Server version 1.0 due to improper validation of DNS label length during query parsing. An attacker can send a specially crafted DNS request containing an invalid label length field that exceeds the actual payload size. When the...
CVE-2026-1663: Missing Authorization
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with group import permissions to create labels in private projects due to improper authorization validation in th...
GitLab 14.4 < 18.7.6 / 18.8 < 18.8.6 / 18.9 < 18.9.2 (CVE-2026-1663)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with group impor...
gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function
A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the applicatio...
CVE-2026-28350 vulnerabilities
Vulnerabilities for packages: label-studio...