304595 matches found
ai.timefold.solver:timefold-solver-migration (>=1.7.0, <=1.23.0), com.alibaba.fastjson2:fastjson2-extension-spring5 (>=2.0.43, <=2.0.58) +1084 more potentially affected by CVE-2026-68496 via com.fasterxml.jackson.dataformat:jackson-dataformat-smile (>=2.16.0, <=2.18.9)
com.fasterxml.jackson.dataformat:jackson-dataformat-smile MAVEN version =2.16.0, =1.7.0, =2.0.43, =0.0.23, =0.0.2, =0.0.11, =1.0.0, =0.0.3, =0.0.3, =1.41.0, =1.49.1, =1.49.1, =1.50.6 and more Source cves: CVE-2026-68496 Source advisory: MEND:CVE-2026-68496...
CLSA-2026-1790875447 TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.16-tuxcare.1...
CVE-2023-54404 Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation
Zod schema-validation library through 4.6.5, fixed in commit e06a510, contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array to an application using an array schema without a length constraint. Attackers can exploit the...
0xpwn (0.1.1), a2a-acl (0.0.14) +745 more potentially affected by CVE-2026-59823 via litellm (>=1.0.0, <=1.83.8)
litellm PYPI version =1.0.0, =0.3.5, =0.7.3, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.1.0, =0.1.1 and more Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...
prompt2model (0.0.9) potentially affected by CVE-2026-59823 via litellm (0.1.583)
litellm PYPI version 0.1.583 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - prompt2model 0.0.9 Source cves: CVE-2026-59823 Source advisory: OSV:PYSEC-2026-4070...
swarm-plus (>=0.0.0.1, <=0.1.0) potentially affected by CVE-2026-56104 via chainlit (1.3.1)
chainlit PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - swarm-plus =0.0.0.1, =0.1.0 Source cves: CVE-2026-56104 Source advisory: OSV:PYSEC-2026-4028...
PYSEC-2026-4134 PickleScan has multiple stdlib modules with direct RCE not in blocklist
Summary picklescan v1.0.3 latest does not block at least 7 Python standard library modules that provide direct arbitrary command execution or code evaluation. A malicious pickle file importing these modules is reported as having 0 issues CLEAN scan. This enables remote code execution that bypasse...
PickleScan has multiple stdlib modules with direct RCE not in blocklist
Summarypicklescan v1.0.3 latest does not block at least 7 Python standard library modules that provide direct arbitrary command execution or code evaluation. A malicious pickle file importing these modules is reported as having 0 issues CLEAN scan. This enables remote code execution that bypasses...
CVE-2026-85228
A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...
CLSA-2026-1790872344 TuxCare security update for drupal/core (2 CVEs)
TuxCare rebuilt drupal/core to address 2 CVEs. Fixed in 10.5.12-p1+tuxcare...
CLSA-2026-1790872226 TuxCare security update for zendframework/zendframework (1 CVE)
TuxCare rebuilt zendframework/zendframework to address 1 CVE. Fixed in 2.4.13-p2+tuxcare...
CLSA-2026-1790870726 TuxCare security update for deepmerge-ts (1 CVE)
TuxCare rebuilt deepmerge-ts to address 1 CVE. Fixed in 7.1.5-tuxcare.1...
CLSA-2026-1790870256 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.14-tuxcare.2...
CLSA-2026-1790870000 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.3-tuxcare.3...
CLSA-2026-1790869902 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.4...
CLSA-2026-1790869753 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 2.4.0-tuxcare.4...
CLSA-2026-1790869488 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.15-tuxcare.2...
CLSA-2026-1790869390 TuxCare security update for @react-native-community (1 CVE)
TuxCare rebuilt 8 @react-native-community packages to address 1 CVE. Fixed in 5.0.1-tuxcare.1...