302366 matches found
CLSA-2026-1790888237 TuxCare security update for devalue (1 CVE)
TuxCare rebuilt devalue to address 1 CVE. Fixed in 5.9.0-tuxcare.1...
CLSA-2026-1790888210 TuxCare security update for devalue (5 CVEs)
TuxCare rebuilt devalue to address 5 CVEs. Fixed in 5.9.2-tuxcare.1...
GO-2026-6579 OpenBao Skips Stricter Deny Policy for LIST operations in github.com/openbao/openbao
OpenBao Skips Stricter Deny Policy for LIST operations in github.com/openbao/openbao...
GO-2026-6554 OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao
OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao...
CVE-2026-53964
Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...
CVE-2026-55251
NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...
CVE-2026-53964
The Document Merge Service is vulnerable to Remote Code Execution (RCE) via Server-Side Template Injection (SSTI) in versions prior to 9.1.0 . The flaw exists because the xltpl library uses a non-sandboxed Jinja environment to process XLSX templates . An attacker can supply malicious template con...
CVE-2026-53964 Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...
CVE-2026-53964 Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...
EUVD-2026-91047
Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...
CLSA-2026-1790884245 TuxCare security update for @react-native-community (1 CVE)
TuxCare rebuilt 12 @react-native-community packages to address 1 CVE. Fixed in 13.6.9-tuxcare.3...
CVE-2026-55251
The NetBox Device Type Library is vulnerable to arbitrary code execution on its CI runner. A contributor with no special repository access could open a pull request modifying requirements.txt , .pre-commit-hooks-config.yaml / .pre-commit-yamlfmt-config.yaml , or .gitmodules files. The CI workflow...
EUVD-2026-91045
NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...
CVE-2026-55251 NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files
NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...
CVE-2026-55251 NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files
NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...
CVE-2026-55251 NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files
NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...
ROOT-APP-MAVEN-CVE-2026-65182 CVE-2026-65182 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-65182 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-65905 CVE-2026-65905 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-65905 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-68525 CVE-2026-68525 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-68525 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...